Role Summary: The L3 Security Infrastructure Management Specialist is a subject matter expert responsible for the advanced design, optimization, and complex troubleshooting of critical network security infrastructure within the telecom environment.
Key Responsibilities:
- Lead the design and implementation of complex network security solutions (e.g., high-availability firewalls, advanced IPS deployments, DDoS mitigation systems).
- Perform advanced troubleshooting and root cause analysis for critical security infrastructure issues.
- Develop and implement security hardening standards and best practices for network devices.
- Evaluate new security technologies and recommend solutions for infrastructure enhancement.
- Provide expert guidance and mentorship to L1/L2 specialists.
- Collaborate with security architects and engineering teams on strategic initiatives.
Essential Qualifications:
- Relevant Experience: 6-9 years in network security engineering or architecture, with significant experience in designing, implementing, and optimizing large-scale security infrastructure.
- Certifications (Optional/Good to Have): CISSP, CCNP Security, Fortinet NSE 7/8, Palo Alto PCNSE, Juniper JNCIE-SEC.
- Typical Skills:
- Expertise in designing, deploying, and managing enterprise-grade firewalls, IPS/IDS, and DDoS mitigation solutions.
- Deep understanding of network routing (BGP, OSPF, MPLS) and switching in a large-scale telecom environment.
- Proficiency in scripting/automation (e.g., Python, Ansible) for infrastructure as code and operational efficiency.
- Experience with security device APIs and orchestration.
- Strong knowledge of security best practices, hardening techniques, and compliance requirements.
- Communication Skills: Excellent written communication for architectural documentation, design specifications, and technical reports; strong verbal communication for leading technical discussions and presenting solutions.
- Analytical Skills: Exceptional analytical and problem-solving skills to diagnose and resolve complex infrastructure challenges, optimize performance, and design resilient security systems.
- Basic Telecom Network Knowledge: Expert-level understanding of telecom network architecture, including IGW operations, FW, IDS/IPS, VPN, International peering, transit IP traffic, and the intricate integration of security infrastructure.
Work Location: In person