Network Security Policy Engineer

Accountabilities:: Audit firewall rules, network segmentation policies, and zone-to-zone access controls to identify overly permissive, unused, shadowed, or misconfigured rules. Assess network security posture and risk exposure, documenting findings and recommending improvements to strengthen policy compliance. Review connectivity requests from application and platform teams, validate them against approved security models, and propose alternative solutions when requests do not meet established standards. Configure, maintain, and troubleshoot firewall policies, access control lists (ACLs), routing rules, and network segmentation changes while following rigorous change-management procedures. Manage temporary ACLs and policy exceptions throughout their lifecycle, ensuring clear ownership, appropriate expiration dates, and timely remediation. Develop and maintain automated policy validation checks to identify non-compliant configurations before they reach production. Replace repetitive manual governance activities with reliable, repeatable automation that improves operational efficiency and policy consistency. Apply least-privilege principles across network devices, hosts, and cloud environments to ensure applications receive only the access they genuinely require. Collaborate with engineering and infrastructure teams to resolve connectivity challenges while balancing operational requirements with security controls. Use scripting, APIs, and policy governance tools to improve visibility, simplify policy reviews, and detect configuration drift. Leverage AI-assisted tools to investigate technical problems and improve productivity while critically assessing their accuracy and limitations. Requirements: At least three years of experience in network engineering, network security, or infrastructure operations within a large-scale production environment. Hands-on experience managing enterprise firewall policies using platforms such as Juniper SRX or Palo Alto Networks, including troubleshooting through logs and packet captures. Strong knowledge of TCP/IP, routing, Network Address Translation (NAT), and Domain Name System (DNS), with the ability to design and manage ACLs across network devices, hosts, and public cloud environments. A solid understanding of network security zones, segmentation, and least-privilege access principles. Practical knowledge of AWS networking, including Virtual Private Clouds (VPCs), transit gateways, and security groups. Proficiency in Python scripting for querying APIs, parsing firewall rules and log data, and automating recurring operational tasks. Strong written communication skills and experience managing technical requests from initial assessment through implementation and follow-up. The ability to work effectively with engineering teams, understand application connectivity requirements, and recommend secure alternatives when requested access is inappropriate. Experience using AI-powered tools to solve practical technical problems, together with the judgment to validate their output and recognize their limitations. Strong analytical, troubleshooting, and problem-solving skills, with attention to detail and a proactive approach to risk management. Effective collaboration and stakeholder management skills, with the ability to explain security requirements clearly to technical teams. The following qualifications are advantageous: Experience with network security policy governance tools such as Tufin or comparable platforms. Familiarity with microsegmentation technologies, including Illumio. Experience implementing policy-as-code workflows using Git and CI/CD tools such as GitHub Actions. Exposure to intrusion detection and prevention systems (IDS/IPS) or Network Detection and Response (NDR) platforms. Relevant professional certifications, such as JNCIS, PCNSE, CCNP Security, or AWS Advanced Networking. A willingness to learn new technologies and contribute to evolving network security practices. Benefits: Remote work: Work from home in India, with occasional office visits for team meetings or events. Competitive health benefits: Access to healthcare coverage designed to support employee well-being, subject to location-specific policies. Retirement and financial planning: Potential access to retirement savings programs and other financial benefits, depending on regional eligibility. Performance incentives: Eligibility for bonus or incentive programs, according to applicable employment terms. Equity opportunities: Potential access to equity grants and an employee stock purchase plan, subject to role and location. Paid time off: Vacation and paid leave benefits in accordance with company policies and applicable local requirements. Family-friendly benefits: Support that may include parental leave and other family-oriented benefits. Collaborative engineering culture: Work with engineering and infrastructure professionals who value experimentation, knowledge sharing, and continuous learning. Professional growth: Opportunities to deepen your expertise in enterprise network security, cloud networking, policy governance, and automation. Meaningful security impact: Help protect production infrastructure by improving access controls, reducing exposure, and strengthening security governance at scale. Inclusive workplace: Join an environment that values diverse perspectives, equal opportunity, and a sense of belonging.