Delivery Manager Enterprise Network

Job description

**Job Purpose** 1. JOB PURPOSE We are seeking a skilled Network Security Manager (GB05) with strong hands-on expertise in Oracle Cloud Infrastructure (OCI) networking and security, including Palo Alto SASE, OCI-native security controls (NSGs, Security Lists), and automation-driven rule governance. The role is responsible for end-to-end network security operations, policy automation, and compliance within OCI environments, ensuring secure, scalable, and audit-ready cloud infrastructure. The candidate will also play a key role in managing security audits, compliance requirements, and ongoing security posture enhancements. **Duties and Responsibilities** PRINCIPAL ACCOUNTABILITIES A. Minimum Required Accountabilities for this Role (Mandatory) OCI Network Security Operations - Manage and operate OCI networking components: oVCNs, Subnets, Route Tables oNSGs (Network Security Groups), Security Lists oInternet Gateway, NAT Gateway, Service Gateway oDRG (Dynamic Routing Gateway), Local Remote Peering - Ensure secure and optimized traffic flow between OCI workloads, on prem systems, and external networks. - Firewall SASE Security Management - Manage and operate Palo Alto (VM-Series / SASE) within OCI and hybrid environments. - Configure and maintain: oSecurity policies and rule bases oNAT (SNAT/DNAT) oVPNs (IPSec/SSL) oThreat prevention profiles (IPS, Anti-malware, URL filtering) - Ensure consistent enforcement of security policies across OCI workloads. - Security Policy Governance Automation - Implement and manage firewall rule lifecycle processes: oRule creation, review, optimization, and decommissioning - Drive automation of rule reviews, recertification, and policy validation using scripts/API-based solutions. - Maintain standardization across NSGs, Security Lists, and firewall rules. - Ingress/Egress Traffic Security - Define and enforce secure ingress and egress controls for OCI applications. - Implement segmentation strategies for east-west and north-south traffic flows. - Ensure secure exposure of applications via load balancers, gateways, and SASE. - Monitoring Incident Management - Monitor firewall logs, OCI flow logs, and threat alerts. - Handle 247 incident response, troubleshooting, and escalation. - Perform root cause analysis (RCA) and implement proactive security improvements. - Audit Compliance Management - Manage network security audits (internal/external/regulatory) specific to OCI environments. - Ensure compliance with organization policies and regulatory frameworks. - Conduct: oFirewall rule reviews and recertification oNSG/security configuration audits oAccess and segmentation validation - Track and close audit observations with proper documentation. - Documentation Collaboration - Maintain updated HLD, LLD, SOPs, runbooks, and security policies. - Collaborate with cloud, DevOps, security, and application teams. \\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_ B. Additional Accountabilities (Advanced / Growth-Oriented) Security Architecture Optimization - Design and optimize secure OCI network architectures with segmentation and zero-trust principles. - Define best practices for VCN design, peering, DRG-based architectures, and load balancing. Automation DevSecOps - Implement Infrastructure as Code (IaC) using Terraform/OCI Resource Manager. - Automate firewall rules, NSG updates, compliance checks, and configuration drift detection. - Integrate network security into CI/CD pipelines. Security Posture Enhancement - Strengthen environment security using: oThreat intelligence oDDoS protection strategies|oContinuous monitoring and anomaly detection - Integrate with SIEM/SOC tools for centralized visibility. Leadership Governance - Act as technical escalation point for OCI security issues. - Guide team members and vendors on best practices. - Define governance models for OCI network security operations. \\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_ **Key Decisions / Dimensions** 5. DECISIONS - Approve firewall rule changes, NSG policies, and security configurations. - Decide segmentation strategies and ingress/egress controls. - Lead decisions during security incidents and audit escalations. - Recommend improvements in security architecture and tooling. **DIMENSIONS** Financial Dimensions - Management of OCI networking/security costs and Palo Alto licensing Other Dimensions - Total Team Size: \\_\\_\\_ - Direct Reports: \\_\\_\\_ - Indirect Reports: \\_\\_\\_ - OCI Environments/VCNs Managed: \\_\\_\\_ - Applications Hosted on OCI: \\_\\_\\_ Major Challenges - Maintaining consistent security posture across dynamic OCI environments. - Managing complex firewall and NSG rule sets without over-permissive access. - Ensuring continuous compliance with audit and regulatory expectations. - Handling high-volume security alerts and incident response. - Balancing agility and speed of deployment with strict security controls. **Required Qualifications and Experience** **SKILLS AND KNOWLEDGE** a) Educational Qualifications - Bachelors / Masters in Computer Science, IT, or related field. b) Work Experience Certifications Must Have - 58+ years in network security with cloud exposure, particularly OCI. - Hands-on experience with: oOCI Networking (VCN, DRG, NSG, Peering) oPalo Alto Firewalls / SASE - Strong knowledge of firewall policy management, NAT, VPNs, and segmentation. - Experience in automating firewall rule review and compliance processes. - Proven experience in handling security audits and compliance requirements. Good to Have - Certifications: OCI Architect/Professional, PCNSE, CCNP Security. - Experience with Terraform, Python, Ansible for automation. - Exposure to SIEM/SOC integrations and cloud security monitoring. Soft Skills - Stro