Engineer - Information Security_Network Security

Innovate in Bengaluru This position is based at our on-site office in Bengaluru. Lowe's offers an ultramodern work environment, complete with cutting-edge technology, collaborative workspaces, an on-site gym and clinic, and other perks to enhance your work experience. About Lowe’s Lowe’s is a FORTUNE® 100 home improvement company serving approximately 16 million customer transactions a week in the United States. With total fiscal year 2024 sales of more than $83 billion, Lowe’s operates over 1,700 home improvement stores and employs approximately 300,000 associates. Based in Mooresville, N.C., Lowe’s supports the communities it serves through programs focused on creating safe, affordable housing, improving community spaces, helping to develop the next generation of skilled trade experts and providing disaster relief to communities in need. For more information, visit Lowes.com. About Lowe’s India Lowe’s India, the Global Capability Center of Lowe’s Companies Inc., is a hub for driving our technology, business, analytics, and shared services strategy. Based in Bengaluru with over 4,500 associates, it powers innovations across omnichannel retail, AI/ML, enterprise architecture, supply chain, and customer experience. From supporting and launching homegrown solutions to fostering innovation through its Catalyze platform, Lowe’s India plays a pivotal role in transforming home improvement retail while upholding strong commitment to social impact and sustainability. For more information, visit Lowes India About The Team The Network Security Team manages and secures enterprise switches, routers and firewall environments through policy implementation, rule optimization, and security configuration. The team handles network security devices upgrades, NGFW migrations, VPN, NAT, and SASE operations while ensuring service availability. It performs traffic analysis, packet captures, and advanced troubleshooting to resolve network and network security issues. The team also manages FireMon policy reviews, compliance, and firewall lifecycle activities. Additionally, it supports BAU operations, infrastructure transitions, reporting, and stakeholder coordination to ensure secure and reliable network services. Job Summary The Engineer, Information Security is a mid-level role responsible for implementing, managing, and optimizing enterprise network and network security solutions across on-premises datacenters and cloud environments. This position provides technical hold in network and network security devices governance, advanced troubleshooting, policy management, and incident response. The engineer will also ensure compliance through structured change management (CRQ) and continuous improvement of security controls. Key Responsibilities Firewall Architecture, Deployment & Management: Configure and maintain enterprise level Fortinet product like FortiGate firewalls & VPN, FortiManager, FortiAnalyzer, FortiSASE Network Contribute to the deployment and optimization of firewall policies, NAT rules, security zones, segmentation, and VPN configurations. Manage firewall operations for both on-premises datacenters and multi-cloud environments. Datacenter Network Security & Troubleshooting Provide enterprise-level troubleshooting skills of datacenter network and security issues involving firewalls, routing, switching, VPNs and connectivity failures. Lead root cause analysis (RCA) and implement long-term corrective actions for recurring problems. Work closely with network and infrastructure teams to resolve complex cross-functional issues. Firewall Policy Creation & Governance Develop, review, and optimize firewall policies to ensure high security, minimal risk, and compliance with organizational standards. Utilize FireMon for rule analysis, change automation, risk assessment, and policy lifecycle management. Conduct periodic rule reviews and cleanup activities to maintain streamlined, efficient policies. Cloud Firewall Security (GCP & Azure & OCI) Implement and manage network security controls in Google Cloud Platform (GCP), including VPC firewall rules, Cloud Armor, and service perimeter configurations. Collaborate with cloud engineering teams to integrate security into cloud architectures and deployments. Incident Management & Response Lead firewall-related security incidents, including detection, investigation, containment, and remediation. Work closely with SOC, threat intelligence, and vulnerability management teams to assess and mitigate risks. Provide detailed incident documentation, RCA, and follow-up action plans. Change Management (CRQ) Create, review, and execute Change Requests (CRQs) in accordance with ITIL best practices. Assess change impact, provide technical guidance, and coordinate implementation activities. Ensure all changes are documented, validated, and completed with minimal operational risk. Technical Collaboration Collaborate with all stakeholders to triage the situation during critical incident and outage Partner with infrastructure, cloud, application, and security teams on initiatives requiring security expertise. Education Qualification Bachelor’s degree in computer science, computer information systems (CIS), or related field Work Experience 5-8 years of experience in architecting, implementing, managing, and optimizing network security solutions across on-premises datacenters and cloud environments. Hands-on expertise with: Fortinet FortiGate Firewall (Url Filtering, Threat Prevention, UTM, ADOM, VDOM) FortiSASE (ZTNA, FortiClient, Policy Mgmt.) Fortimanager, FortiAnalyzer, FortiAuthenticator GCP Firewall, VPC security, Cloud Armor Cisco catalyst & Nexus Switches, Routers, F5 LB's, Cisco ISE Strong experience with datacenter troubleshooting, network flows, packet capture, and performance analysis. Experience with policy creation, rule optimization, and governance. Proficiency with Firemon or similar firewall policy management tools. Strong background in incident management, RCA, and remediation actions. Experience with CRQ/ITIL change management frameworks. Soft Skills Project Management – Connect with cross-functional teams to deliver complex networking/security projects on time and within scope. Documentation & Communication – Creating clear technical documentation and effectively communicating with technical/non-technical stakeholders. Lowe's is an equal opportunity employer and administers all personnel practices without regard to race, color, religious creed, sex, gender, age, ancestry, national origin, mental or physical disability or medical condition, sexual orientation, gender identity or expression, marital status, military or veteran status, genetic information, or any other category protected under federal, state, or local law.