Role Purpose

Act as senior escalation and technical authority for complex Cisco ACI, routing, switching, DCI/WAN, firewall, F5, and foundational network-service incidents and changes. Lead RCA, technical risk review, performance optimization, DR support, and OEM escalation within the approved architecture.

Required Skills

- Expert Cisco ACI, routing, switching, WAN/DCI, high availability, and troubleshooting
- Advanced firewall and F5 engineering across relevant vendors
- Network security governance, packet analysis, performance, capacity, RCA, and DR
- Strong change-risk assessment and executive incident communication

Key Accountabilities

- Lead diagnosis and restoration for severe network, ACI, routing, switching, inter-site connectivity, firewall, and load-balancer incidents.
- Perform RCA, identify preventive actions, review recurring faults, and mentor L1/L2 engineers.
- Provide technical assurance for major changes, firewall governance, firmware maintenance, failover, DR readiness, configuration risk, and performance or capacity concerns.
- Coordinate senior escalations with Cisco, F5, Palo Alto, Fortinet, Check Point, carriers, and other vendors.
- Maintain engineering runbooks, known-error content, technical standards compliance evidence, and improvement recommendations.
- Work only on approved, in-scope infrastructure and follow the Bank-approved ITSM (Service Now), change, access, security, and evidence-retention processes.
- Maintain accurate incident, request, change, problem, knowledge, and operational records in the approved tools and repositories.





Qualifications and Experience

- 8-12 years, with at least 5 years in enterprise network security engineering
- Bachelor degree in networking, IT, engineering, or equivalent
- CCNP/CCIE, PCNSE, Fortinet skilled, Check Point, or F5 advanced certification preferred
- ITIL 4 Foundation; problem management experience preferred

Working Arrangements

- The role is based in India and will operate under 9x5 Singapore business hours with on-call support.
- The role shall participate in the applicable support roster and provide after-hours support for critical incidents in accordance with the approved severity and activation process.
- Participation in planned maintenance, major incident support, disaster recovery exercises and approved out-of-hours changes may be required.
- Successful completion of background screening, identity and employment verification, confidentiality obligations, security training and client onboarding is required before access is granted.
- Production access shall use approved privileged-access and multi-factor authentication controls and remain subject to least privilege, segregation of duties, monitoring and periodic review.
- All activities shall follow approved runbooks, service scope, ITSM processes, change control, maintenance windows, evidence-retention requirements and client approvals.
- Coordinate with other resolver teams, client stakeholders, application teams, facilities teams, and OEM vendors without assuming responsibilities outside the contracted scope.

📌 Network Security Engineer (Bengaluru)
🏢 Kornferry
📍 Bengaluru