Network Security Policy Engineer

<h3>Accountabilities:</h3><li>Audit firewall rules, network segmentation policies, and zone-to-zone access controls to identify overly permissive, unused, shadowed, or misconfigured rules.</li><li>Assess network security posture and risk exposure, documenting findings and recommending improvements to strengthen policy compliance.</li><li>Review connectivity requests from application and platform teams, validate them against approved security models, and propose alternative solutions when requests do not meet established standards.</li><li>Configure, maintain, and troubleshoot firewall policies, access control lists (ACLs), routing rules, and network segmentation changes while following rigorous change-management procedures.</li><li>Manage temporary ACLs and policy exceptions throughout their lifecycle, ensuring clear ownership, appropriate expiration dates, and timely remediation.</li><li>Develop and maintain automated policy validation checks to identify non-compliant configurations before they reach production.</li><li>Replace repetitive manual governance activities with reliable, repeatable automation that improves operational efficiency and policy consistency.</li><li>Apply least-privilege principles across network devices, hosts, and cloud environments to ensure applications receive only the access they genuinely require.</li><li>Collaborate with engineering and infrastructure teams to resolve connectivity challenges while balancing operational requirements with security controls.</li><li>Use scripting, APIs, and policy governance tools to improve visibility, simplify policy reviews, and detect configuration drift.</li><li>Leverage AI-assisted tools to investigate technical problems and improve productivity while critically assessing their accuracy and limitations.</li><h2>Requirements:</h2><li>At least three years of experience in network engineering, network security, or infrastructure operations within a large-scale production environment.</li><li>Hands-on experience managing enterprise firewall policies using platforms such as Juniper SRX or Palo Alto Networks, including troubleshooting through logs and packet captures.</li><li>Strong knowledge of TCP/IP, routing, Network Address Translation (NAT), and Domain Name System (DNS), with the ability to design and manage ACLs across network devices, hosts, and public cloud environments.</li><li>A solid understanding of network security zones, segmentation, and least-privilege access principles.</li><li>Practical knowledge of AWS networking, including Virtual Private Clouds (VPCs), transit gateways, and security groups.</li><li>Proficiency in Python scripting for querying APIs, parsing firewall rules and log data, and automating recurring operational tasks.</li><li>Strong written communication skills and experience managing technical requests from initial assessment through implementation and follow-up.</li><li>The ability to work effectively with engineering teams, understand application connectivity requirements, and recommend secure alternatives when requested access is inappropriate.</li><li>Experience using AI-powered tools to solve practical technical problems, together with the judgment to validate their output and recognize their limitations.</li><li>Strong analytical, troubleshooting, and problem-solving skills, with attention to detail and a proactive approach to risk management.</li><li>Effective collaboration and stakeholder management skills, with the ability to explain security requirements clearly to technical teams.</li><h2>The following qualifications are advantageous:</h2><li>Experience with network security policy governance tools such as Tufin or comparable platforms.</li><li>Familiarity with microsegmentation technologies, including Illumio.</li><li>Experience implementing policy-as-code workflows using Git and CI/CD tools such as GitHub Actions.</li><li>Exposure to intrusion detection and prevention systems (IDS/IPS) or Network Detection and Response (NDR) platforms.</li><li>Relevant professional certifications, such as JNCIS, PCNSE, CCNP Security, or AWS Advanced Networking.</li><li>A willingness to learn new technologies and contribute to evolving network security practices.</li><h2>Benefits:</h2><li>
<strong>Remote work:</strong>Work from home in India, with occasional office visits for team meetings or events.</li><li>
<strong>Competitive health benefits:</strong>Access to healthcare coverage designed to support employee well-being, subject to location-specific policies.</li><li>
<strong>Retirement and financial planning:</strong>Potential access to retirement savings programs and other financial benefits, depending on regional eligibility.</li><li>
<strong>Performance incentives:</strong>Eligibility for bonus or incentive programs, according to applicable employment terms.</li><li>
<strong>Equity opportunities:</strong>Potential access to equity grants and an employee stock purchase plan, subject to role and location.</li><li>
<strong>Paid time off:</strong>Vacation and paid leave benefits in accordance with company policies and applicable local requirements.</li><li>
<strong>Family-friendly benefits:</strong>Support that may include parental leave and other family-oriented benefits.</li><li>
<strong>Collaborative engineering culture:</strong>Work with engineering and infrastructure professionals who value experimentation, knowledge sharing, and continuous learning.</li><li>
<strong>Professional growth:</strong>Opportunities to deepen your expertise in enterprise network security, cloud networking, policy governance, and automation.</li><li>
<strong>Meaningful security impact:</strong>Help protect production infrastructure by improving access controls, reducing exposure, and strengthening security governance at scale.</li><li>
<strong>Inclusive workplace:</strong>Join an environment that values diverse perspectives, equal opportunity, and a sense of belonging.</li>