: IT Security Engineer

Position Overview The selected IT Security Engineer shall be deployed to safeguard data repositories, networks, and digital portals of the Department/Ministry. The resource will ensure absolute compliance with the MeiTY Security Guideline

1. Core Roles and Operational Duties

- Network & Perimeter Defence: Monitor and maintain local network security, configure Next-Gen Firewalls, Web Application Firewalls (WAF), and Identity & Access Management (IAM) tools.
- Identity and Access Management (IAM): Implement strict Role-Based Access Control (RBAC) and Multi-Factor Authentication (MFA) parameters for internal applications, ensuring the principles of Least Privilege and Zero Trust architecture.
- Vulnerability & Patch Management: Execute routine internal Vulnerability Assessments and Penetration Testing (VAPT) across local networks, web applications, and endpoints. Manage system updates, critical security hotfixes, and OS patch tracking.
- Log Analysis & Threat Hunting: Monitor network traffic, server logs, and security feeds to flag anomalous behaviour.
- Incident Response & Disaster Recovery: Act as a first responder to any active malicious indicators, unauthorized intrusion attempts, or data breaches. Ensure local, off-site, and cloud data backups are operational and secure.
- Audit Facilitation: Prepare documentation, network architecture layouts, and system configurations to facilitate the mandatory periodic cyber audits executed by CERT-In empanelled auditors.
- Policy Enforcement: Strictly implement government security policies, including complex password lifecycles, Multi-Factor Authentication (MFA), network segregation, and secure operating system patching.
- Data Security & Encryptions:



Implement off-line or secondary data backups and handle local encryption methodologies (IPSec/SSH) to secure intra-government data flows.

1. Educational & Qualified Qualifications

- Mandatory Degree: B.E. / B.Tech / MCA in Computer Science, Information Technology or Cyber Security
- Experience Required: 3 to 5 years of verified industry experience in core system and network security domains.
- Desirable Experience: Prior working experience in a Government Sector, PSU, National Data Center, or Autonomous Body (highly preferred).

1. Technical Skillsets & Certifications

- Core Skills: Comprehensive knowledge of TCP/IP stacks, Linux/Windows OS administration, DNS configurations, and scripting (Python, Bash, or PowerShell).
- Platforms: Familiarity with the Cloud architecture, PaaS/IaaS security constraints, and endpoints management.
- Preferred Certifications (At least one):

1. CEH (Certified Ethical Hacker)

2. CompTIA Security+
3. Cisco CCNA / CCNP Security
4. CISSP / CISM (Highly valued for senior roles)
5. COMPREHENSIVE TECHNICAL KNOWLEDGE & COMPETENCIES

The resource must demonstrate high technical proficiency across the following ecosystems:
- Operating Systems: Deep expertise in administrative hardening of Linux (RHEL, Ubuntu, etc) and Windows Server environments.
- Network Frameworks: Sound understanding of OSI layer interactions, TCP/IP configurations, DNS Security Extensions (DNSSEC), BGP routing protocols, and secure remote protocols (SSH, IPSec, SSL/TLS).
- Cloud Environments: Practical knowledge of securing public cloud architectures and container security.
- Scripting Language: Competency in writing script configurations (Python, Bash, or PowerShell) to automate automated log monitoring and vulnerability triage workloads.

📌 IT Security Engineer - IPR -Delhi (New Delhi)
🏢 National Institute for Smart Government (NISG)
📍 New Delhi