Senior Network Engineer responsible for operating and evolving remote access VPN, firewalls, NAC, and micro‑segmentation infrastructure across campus and data center environments.
Responsibilities
Manage and operate a large‑scale remote access VPN environment for a distributed workforce.
Administer on‑premises firewalls (Fortinet and Palo Alto) across campus and data center locations, including policy management and rule lifecycle.
Administer Cisco ISE.
Deploy and manage Guardicore micro‑segmentation to enforce workload‑level security policies in the data center.
Operate Zscaler (ZIA, ZPA) for secure internet access and zero‑trust private application connectivity.
Requirements
Nice to have: network automation
Nice to have: Python
Nice to have: Ansible
Nice to have: vendor APIs
Nice to have: zero‑trust network access principles
Lead the design, implementation, and management of cloud and on‑premises network infrastructure for STEMCELL Technologies.
Compensation
The annual salary for this job ranges from:
$116,700.00 - $175,100.00
Responsibilities
Own the design, implementation, and management of VPCs, subnetting strategy, and Transit Gateway configurations across all accounts and regions
Lead day‑to‑day operations and support of the organization’s AWS network environment and support and troubleshoot hybrid connectivity between on‑premises facilities and AWS, including Direct Connect and site‑to‑site VPN tunnels
Manage and maintain the Terraform codebase for Zscaler, and drive the expansion of infrastructure‑as‑code coverage across the platform
Lead the design and expansion of the Zscaler security fabric to strengthen the organization’s overall network security posture
Partner with security and application teams to align network controls with evolving business and compliance requirements
Requirements
Bachelor’s degree with 10+ years of relevant experience
Master’s degree with 8+ years of relevant experience
Lead the design and specification of Network and Zero Trust architecture across GSK, acting as the design authority and setting standards for security solutions.
Responsibilities
Act as design authority for Network and Zero Trust architecture across GSK
Own the Zero Trust policy framework: device trust, identity trust and application access policy
Own network segmentation and microsegmentation standards across the estate
Own SASE and SD-WAN security architecture, secure remote access design and DNS security architecture
Produce architecture specifications that Solution Engineering builds from without reinterpretation
Lead the design authority for Network and Zero Trust architecture across GSK, owning policy frameworks, segmentation standards, and secure remote access design.
Responsibilities
Act as design authority for Network and Zero Trust architecture across GSK
Own the Zero Trust policy framework: device trust, identity trust and application access policy
Own network segmentation and micro segmentation standards across the estate
Own SASE and SD-WAN security architecture, secure remote access design and DNS security architecture
Produce architecture specifications that Solution Engineering builds from without reinterpretation
Own security product management for Network, Zero Trust and MDR security tooling, defining requirements, managing vendor delivery, and driving product lifecycle and roadmap.
Responsibilities
Own the product lifecycle and roadmap for Network, Zero Trust and MDR security tooling.
Define product requirements with the architecture domains and track them through build to release.
Own adoption as an enforcement figure and act when migration stalls.
Manage Zscaler, Netskope, Illumio and the MDR provider against delivery and detection-quality commitments.
Own the investment case and total cost of ownership position.
Requirements
Bachelor's degree in a relevant discipline, or equivalent professional experience.
Nice to have: Technical familiarity with Zero Trust enforcement points, segmentation, SASE and SD-WAN, secure remote access, SIEM, SOAR, EDR/XDR and MDR tooling
Nice to have: Product management discipline — roadmaps, adoption and coverage metrics, and decommission business cases
Nice to have: Vendor governance rhythm — QBRs, executive business reviews, SLA management and commercial negotiation input to Procurement
Nice to have: Portfolio analytics, licence utilisation and renewal calendar management, with tracking and alerts automated through dashboards
Shape the future of secure remote connectivity by working on enterprise-scale Zero Trust, VPN modernization, and remote access solutions that support employees across the globe.
Locations (2)
Bangalore, Karnataka, India
Chennai, Tamil Nadu, India
Responsibilities
Design and implement robust and cost-effective Remote Access solutions exploiting emerging technologies.
Develop and manage an engineering plan, based on provided architectural documents.
Document and communicate engineering and operational deliverables.
Manage product lifecycle.
Assist with the evaluation and engineering of software products and technologies.
Assist in designing, deploying, and managing cyber data protection solutions to secure Deloitte US Member Firm data and client data.
Compensation
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. A reasonable estimate of the current range is $84,300 to $173,300.
Responsibilities
Assist with the development, deployment, and support of cyber data protection solutions.
Assist with the implementation of data security controls and design principles.
Provide Tier 2 technical support to Deloitte end users for cyber data protection services.
Assist in maturing existing data protection solutions protecting against data exfiltration.
Assist in rolling out new data protection services for employees.
Requirements
Bachelor’s degree or equivalent in Information Technology, Computer Science, or Engineering
Seeking an experienced Specialist, Data Loss Prevention (DLP) to lead the design, implementation, and ongoing management of data-protection and information-security controls across the firm, safeguarding sensitive client, attorney, financial, and privileged data.
Responsibilities
Serve as the firm’s subject-matter expert for Data Loss Prevention, information protection, and data-security controls.
Develop, maintain, and mature a risk-based DLP strategy, governance framework, operating model, and multi-year roadmap.
Define DLP controls based on data sensitivity, user role, business function, client requirements, regulatory obligations, and firm risk tolerance.
Assess DLP maturity, identify gaps, prioritize improvements, and report progress through meaningful metrics, dashboards, and executive updates and reduce SOC false positives.
Review SOC escalations and assess alerts based on content, user role, authorization, and normal business workflows.
Cybersecurity Analyst – SOC Operations responsible for monitoring, detecting, investigating, and responding to cybersecurity threats across the enterprise environment.
Compensation
$110,000 - $120,000
Responsibilities
Monitor enterprise security tools and alerts for suspicious activity
Analyze and triage security events from SIEM, EDR, email, network, identity, and cloud platforms
Correlate logs and events across multiple security systems to identify threats
Escalate high-risk incidents according to playbooks
Participate in incident response activities including detection, triage, containment, eradication, recovery, and post-incident review
Consultant Cyber Engineering - Data ProtectionNewDeloitte · Birmingham, US