Senior Officer, Delivery

Network Security Operations

• Manage enterprise firewalls, security gateways and secure remote access across data centers, branches and cloud environments.

• Configure and monitor IDS/IPS, threat prevention, web filtering, application control and network malware protection.

• Design segmentation and micro-segmentation using VLANs, VRFs, subnets, security zones, security groups and access-control policies.

• Support routing, switching, DNS, DHCP, load balancing, wireless, SD-WAN, site-to-site VPN, client VPN and private connectivity.

• Monitor availability, capacity and security events; troubleshoot complex issues and perform root-cause analysis.

Cloud & Hybrid Network Engineering

• Design and manage virtual networks across supported public and private cloud platforms, including approved subnets and security zones.

• Configure security groups, cloud firewall controls, route tables, gateways, private endpoints and platform connectivity services.

• Manage IP addressing, DNS, network interfaces and deployment of cloud resources into approved network segments.

• Configure cloud peering and secure hybrid connectivity through VPN, dedicated circuits, interconnect services and routing gateways.

• Maintain cloud-network diagrams, IP plans, dependency maps, configuration baselines and runbooks.

Endpoint Security & Hardening

• Administer EDR/XDR, anti-malware, host firewall, application control, device control and endpoint-detection policies.

• Implement server and endpoint hardening, security baselines, patching controls, vulnerability remediation and compliance policies.

• Investigate alerts, isolate affected devices when authorized, coordinate containment and recovery, and document findings.

• Support mobile-device management, unified endpoint management and secure access controls.

Data Protection, DLP & Classification

• Implement DLP policies across endpoints, email, collaboration platforms, cloud services and supported applications.

• Enforce classification, sensitivity labeling, handling, retention and secure information-sharing controls.

• Configure encryption for data at rest and in transit across disks, files, databases, storage, backup and communications.

• Support discovery, policy tuning, exceptions, alert investigation and compliance evidence collection.

Key, Vault, Certificate & Secrets Management

• Manage enterprise or cloud vaults, key stores, HSM integrations and secrets-management services.

• Generate or securely import cryptographic material and manage key lifecycle, rotation, revocation, archival and retirement.

• Manage secrets, service credentials, tokens and certificates, including permissions, expiry, renewal and audit logs.

• Assign encryption keys to supported storage, database, backup, virtual-disk and application resources.

Identity, Access & Cloud Security Governance

• Configure and review IAM users, roles, groups, service identities, policies and privileged access using least privilege and segregation of duties.

• Implement MFA, conditional access and secure administrative access where supported.

• Apply cloud-security posture, workload protection, logging, monitoring, configuration and compliance controls.

• Participate in architecture reviews, risk and vulnerability assessments, and remediation planning.

Security Monitoring & Incident Response

• Integrate network, cloud, endpoint, identity and security platforms with centralized monitoring, SIEM, SOC and managed-detection services.

• Monitor alerts and logs, triage incidents, collect evidence and coordinate escalation, containment, recovery and post-incident actions.

• Maintain use cases, alert rules, dashboards, health checks and operational reports.

• Perform root-cause analysis and recommend preventive improvements.

Deployment, Managed Services & Documentation

• Deliver implementation, migration, configuration, testing, handover and ongoing support for cloud and on-premises network-security projects.

• Prepare HLD/LLD, method statements, implementation, test and rollback plans, as-built records and operational runbooks.

• Execute incidents, requests, changes and problems within agreed SLAs and change-management procedures.

• Coordinate with customers, internal teams, OEMs, cloud providers, carriers and security partners.

• Provide workshops, knowledge transfer, technical discovery, estimation, bills of materials and pre-sales support when required.