Network Security Technical Lead

About the role

We are seeking a senior technical authority to own the end‑to‑end design, deployment, and 24/7 operation of secure network and security infrastructure across multi‑cloud (Azure, GCP, OCI) and on‑premises environments. The role combines architecture, hands‑on engineering, and operational leadership to ensure a resilient, audit‑ready network.

Key responsibilities

• Design secure reference architectures for hub‑spoke, VNet/VPC/VCN, subnetting, IP/CIDR, and static/BGP routing across Azure, GCP, OCI, and on‑premises.
• Architect connectivity patterns such as VPN, peering, ExpressRoute, Interconnect, and FastConnect, and lead security design reviews.
• Lead deployment and configuration of site‑to‑site VPNs, VPC/VCN peering, NSGs, security lists/ACLs, NVAs, next‑gen firewalls, and Internet/NAT/Service Gateways.
• Implement redundancy, load balancing, failover, and disaster‑recovery to meet 24/7 availability targets.
• Own round‑the‑clock operational management, including change management, patching, vulnerability remediation, and incident response.
• Configure monitoring, logging, and diagnostics (Azure Monitor, GCP Cloud Monitoring, OCI Monitoring) and harden configurations to CIS/NIST benchmarks.
• Prepare and present operational reports, dashboards, and risk posture summaries to leadership.
• Run operational meetings, stand‑ups, service reviews, and act as senior escalation point for critical issues.

Required profile

• Proven experience designing and operating secure network architectures in hybrid and multi‑cloud environments.
• Hands‑on expertise with Azure, Google Cloud Platform, Oracle Cloud Infrastructure, and traditional routing/switching.
• Strong background in network security engineering, incident management, and audit readiness.
• Excellent communication skills for reporting to leadership and coordinating cross‑functional teams.

Required skills

• Microsoft Azure
• Google Cloud Platform (GCP)
• Oracle Cloud Infrastructure (OCI)
• BGP routing
• Site‑to‑site VPN
• ExpressRoute, Interconnect, FastConnect
• Network Security Groups (NSG), security lists, ACLs
• Network Virtual Appliances (NVA) and next‑gen firewalls
• Azure Monitor, GCP Cloud Monitoring, OCI Monitoring
• CIS and NIST hardening benchmarks