Sr. Network Security Engineer

Job description

Company Description Bosch Global Software Technologies Private Limited is a 100% owned subsidiary of Robert Bosch GmbH, one of the world's leading global supplier of technology and services, offering end-to-end Engineering, IT and Business Solutions. With over 27,000+ associates, it's the largest software development center of Bosch, outside Germany, indicating that it is the Technology Powerhouse of Bosch in India with a global footprint and presence in the US, Europe and the Asia Pacific region. Job Description Roles \& Responsibilities : We are seeking a Senior IT/OT Network Engineer with a world-class foundation in Core Networking (Layer 2/3) and Secure Site-to-Site Connectivity who would be working on customer products/projects Qualifications SKILLS Needed: Networking (L2/L3):Switching, STP, VLANs, BGP, OSPF, VRF, routing protocols Firewall \& Security:Cisco ASA / FTD / FMC, DMZ, Context design, segmentation Zero Trust:ZPA / ZIA / Cisco ZTA, MFA, privileged access Cloud --- AWS (Mandatory):VPC, EC2, Transit Gateway, Direct Connect, virtual firewall Standards (Awareness):IEC 62443, NIST CSF, ISO 27001, Purdue Model Certifications (Preferred):CCNP / CCIE, AWS Advanced Networking, CISSP MUST-HAVE REQUIREMENTS • Layer 2 / Layer 3 Networking ---VLANs, STP, BGP, OSPF, VRF --- must have designed in real environments, hands-on configuration experience on Cisco devices (Switches/Routers/Firewalls) • Firewall Architecture ---Hands-on Cisco ASA / FTD / FMC, DMZ, Context and segmentation design • Zero Trust ---Replaced VPN with ZTA, experience with Zscaler or Cisco ZTA • AWS Cloud Networking ---VPC, EC2, Transit Gateway, Direct Connect, Security Groups, virtual firewall on EC2 --- mandatory, not optional • Standards Awareness ---Knows IEC 62443, NIST CSF, ISO 27001, Purdue Model at a conceptual level --- does not need deep implementation experience CLOUD NETWORKING DETAIL Candidate must have hands-on AWS experience. Azure or GCP knowledge is a bonus but AWS is required. • VPC \& Subnets ---Design public/private subnets, route tables, internet gateway, NAT gateway • EC2 ---Launch and configure instances, assign ENIs, Elastic IPs, IAM roles, Auto Scaling • Virtual Firewall on EC2 ---Deploy Cisco FTDv, Palo Alto VM-Series, or FortiGate as EC2 instances • Virtual Router on EC2 ---Deploy software routers (Cisco CSR 1000V / VyOS), BGP peering in AWS • Connectivity ---Direct Connect, Site-to-Site VPN, Transit Gateway for hybrid and multi-site • Security ---Security Groups, NACLs, AWS Network Firewall, VPC Flow Logs, CloudTrail STANDARDS --- AWARENESS LEVEL IS ENOUGH Candidate should be able to discuss these standards in an interview --- not implement them from scratch. IEC 62443:Industrial cybersecurity standard --- security zones, conduits, and security levels NIST CSF:Identify, Protect, Detect, Respond, Recover --- risk-based security framework ISO / IEC 27001:Information security management system (ISMS) --- how security is governed Purdue Model:Layered industrial network model --- why OT/IT segmentation is designed in levels NERC CIP:Power grid cybersecurity compliance --- awareness is fine for energy sector projects EXPERIENCE EXPECTATIONS - Mandatory • Experience ---8 to 10 years in network engineering • Ownership ---Has owned design and implementation decisions --- not just followed instructions • Leadership ---Can review team designs, mentor engineers, and drive technical direction along with hands-on demonstration of core skills mentioned above • Communication ---Comfortable speaking to executives, customers, and compliance teams • Certifications: CCNP WHAT TO LOOK FOR IN A RESUME • Job Titles --- Sr.Network Security Engineer • Cloud Projects ---VPC designs, hybrid connectivity, virtual firewall/router deployments on EC2 • Certifications (Good-to-have) --- CCIE, AWS Certified Advanced Networking, AWS Solutions Architect, CISSP GOOD TO HAVE --- NOT MANDATORY • Any OT / SCADA exposure ---even at project or client level • Azure or GCP networking ---as an addition to AWS • Infrastructure as Code ---Terraform, CloudFormation, or Ansible for network automation QUALIFICATIONS BTech / BCA / MCA ++Experience:++ 8 yrs - 10 yrs