Junior Network Security Engineer

Location: Pune, India

A key objective of the position is to support the team in reducing the operational ticket backlog while maintaining service quality, security, and accurate documentation. The role performs initial analysis and troubleshooting, resolves standard and recurring requests based on documented procedures, and escalates complex issues to experienced engineers, the Network Security Architect, vendors, or service providers when required.

The position also supports platform monitoring, maintenance, lifecycle activities, audits, control reviews, documentation, and continuous service improvement. The Junior Network Security Engineer works under the guidance of experienced team members and gradually develops broader technical knowledge and operational responsibility across the Network Security & Trust service portfolio.

We offer

1. Incident, Service Request and Change Processing – 35%

Process Network Security & Trust incidents, service requests, tasks, and standard changes using the designated IT service-management tool.

Perform initial analysis, troubleshooting, classification, prioritization, and documentation of incoming tickets.

Resolve standard and recurring issues by following approved procedures, knowledge articles, technical standards, and operational runbooks.

Support the team in reducing the ticket backlog through structured processing, regular follow-up, and accurate status updates.

Monitor assigned tickets and ensure timely processing in line with agreed priorities and service levels.

Collect relevant technical information, logs, configurations, and error details before escalating complex cases.

Escalate security-critical, high-impact, or technically complex issues to senior engineers, architects, vendors, or service providers.

Support the planning, testing, documentation, and implementation of standard and low-risk changes.

Participate in incident reviews, problem investigations, and root cause analysis under the guidance of experienced team members.

Create and maintain knowledge articles, troubleshooting instructions, and operational runbooks for recurring issues.

2. Firewall Operations and Security Policy Support – 25%

Support the daily operation, monitoring, maintenance, and health checking of enterprise firewall services across on-premises, cloud, edge, and industrial environments.

Implement approved firewall-rule, object, NAT, and security-policy changes by following established procedures and technical standards.

Validate requests for completeness, approvals, ownership, source and destination information, ports, protocols, and business justification.

Support the review, modification, deactivation, and removal of firewall rules and objects.

Assist with firewall rule reviews, recertification, cleanup, and policy-optimization activities.

Perform initial troubleshooting of firewall, NAT, security-policy, and communication-flow issues.

Monitor firewall availability, capacity, performance, and operational alerts and escalate deviations where required.

Support firewall platform maintenance, upgrades, backup and restore activities, and operational readiness checks.

Maintain accurate firewall configuration records, operating procedures, diagrams, and technical documentation.

3. VPN, Partner Connectivity and Segmentation Operations – 15%

Support the implementation, maintenance, monitoring, and troubleshooting of site-to-site IPsec VPN connections.

Process standard requests related to business partner, service provider, cloud, and third-party connectivity.

Assist with the implementation and maintenance of approved network-segmentation controls, security zones, and controlled communication paths.

Support NAC and microsegmentation activities from a network-security and policy-enforcement perspective.

Perform initial troubleshooting of VPN availability, tunnel status, encryption parameters, network-security policies, and connectivity dependencies.

Maintain accurate configuration, ownership, approval, and lifecycle information for VPN and partner-connectivity services.

Support periodic reviews, recertification, deactivation, and removal of obsolete VPN connections and communication paths.

Coordinate operational tasks with internal infrastructure teams, external partners, vendors, and managed service providers.

4. PKI and Certificate Operations – 10%

Process standard certificate requests and support the issuance, deployment, renewal, replacement, revocation, and retirement of digital certificates.

Support operational activities related to Public Key Infrastructure and Certificate Lifecycle Management.

Monitor certificate validity, upcoming expirations, service alerts, and certificate-related operational events.

Assist application owners, infrastructure teams, network teams, and service providers with standard certificate requests and lifecycle activities.

Perform initial troubleshooting of certificate enrollment, expiration, trust-chain, revocation, validation, and TLS-related issues.

Maintain accurate certificate inventory, ownership, lifecycle, configuration, and operational information in the designated systems of record.

Support the onboarding of applications, infrastructure platforms, network devices, users, and machine identities to approved certificate services.

Support PKI and CLM platform maintenance, control reviews, audits, backup and restore activities, and operational documentation.

Escalate complex issues related to PKI, Certificate Authorities, cryptography, trust models, or certificate integration to the responsible specialists.

5. Service Reliability, Lifecycle and Compliance Support – 10%

Perform recurring operational checks and maintenance activities for Network Security & Trust services.

Support platform lifecycle activities, including software updates, upgrades, configuration reviews, backup verification, and operational readiness checks.

Assist with monitoring service health, availability, capacity, certifica