Lead Network Security Architect

Job description

Enterprise IT & Quality **Organization:** Novo Nordisk Global Business Services (GBS) India Protect the systems that protect patients. As our Lead Network Security Architect, youll shape the zero trust and network security posture of one of the worlds leading healthcare companies ensuring that the infrastructure behind life-saving medicines stays resilient, secure, and ready for whats next. **Your new role** In this role, you will serve as the technical Subject Matter Expert for Zero Trust Network Access (ZTNA), Next-Generation Firewall (NGFW) technologies, and Operational Technology (OT) security platforms. Youll lead secure access design and policy governance, drive incident resolution, and champion continuous improvement across enterprise network security environments. Day-to-day your responsibilities will include: - Acting as the primary SME for ZTNA, providing L3 engineering support, technical leadership, and advanced troubleshooting for authentication, authorization, policy enforcement, and endpoint connectivity - Administering, configuring, and optimizing secure access services including Zero Trust access, Secure Web Gateway, DNS-layer security, Firewall-as-a-Service, and Cloud Access Security Broker capabilities - Providing L3 administration for enterprise NGFW environments managing security policies, IPS/IDS, application-aware rules, URL filtering, SSL/TLS inspection, and threat detection - Planning, coordinating, and maintaining OT monitoring infrastructure, ensuring asset discovery, network visibility, and alignment with industry standards such as IEC 62443 - Performing root cause analysis for complex network security incidents and recommending policy improvements to strengthen the enterprise security posture - Collaborating with infrastructure, cybersecurity, cloud, identity, and OT teams to ensure secure, reliable network operations and support incident, problem, and change management activities in accordance with ITIL practices - Developing and maintaining operational documentation, standard operating procedures, and technical knowledge articles **Your new department** In Enterprise IT & Quality, you will be part of a business area that drives impact across the full Novo Nordisk value chain. We strive to stay close to our stakeholders in the business to ensure we deliver on their needs, helping reach millions of people living with serious chronic diseases. Our focus is on being at the forefront within our three areas; ensuring the highest quality for patients, being a trusted tech leader and an environmentally responsible business. The Cyber Defence Centre Security Technology Operations- NDR & OT team within Infrastructure & Information Security is at the forefront of ensuring the availability, integrity, and confidentiality of IT solutions. This dynamic, fast-paced team implements, manages, and maintains security technologies across Network & OT environments acting as the operational backbone to the overall CDC organization. With a collaborative atmosphere and global presence, youll work alongside the Global Security Organisation to enhance Novo Nordisks security posture and support business continuity. **Your skills & qualifications** Were looking for a Lead Network Security Architect who thrives at the intersection of deep technical expertise and enterprise-scale security challenges. Youll bring with you: - Extensive hands-on experience with Zero Trust Network Access platforms (e.g. Cisco Secure Access, Zscaler ZPA/ZIA, Prisma Access) and Secure Service Edge (SSE) technologies including SWG, FWaaS, and CASB - Strong L3 administration experience with Next-Generation Firewalls such as Palo Alto Networks (Panorama), Check Point, Fortinet, or Cisco Secure Firewall - Working knowledge of OT security platforms (e.g. Nozomi Networks, Claroty, Cisco Cyber Vision, Microsoft Defender for IoT) and familiarity with IEC 62443 or similar OT security frameworks - Solid understanding of identity and access management technologies including Microsoft Entra ID, Okta, Active Directory, SAML, OAuth, OpenID Connect, and MFA integration - Deep expertise in networking and security fundamentals: TCP/IP, routing and switching, DNS, VPN, network segmentation, TLS/SSL, and enterprise security monitoring - Excellent analytical and communication skills with the ability to lead root cause analysis, document findings, and drive continuous improvement across a complex stakeholder landscape Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.