Delivery Manager Enterprise Network

Job Purpose 1. JOB PURPOSE We are seeking a skilled Network Security Manager (GB05) with strong hands-on expertise in Oracle Cloud Infrastructure (OCI) networking and security, including Palo Alto SASE, OCI-native security controls (NSGs, Security Lists), and automation-driven rule governance. The role is responsible for end-to-end network security operations, policy automation, and compliance within OCI environments, ensuring secure, scalable, and audit-ready cloud infrastructure. The candidate will also play a key role in managing security audits, compliance requirements, and ongoing security posture enhancements. Duties and Responsibilities PRINCIPAL ACCOUNTABILITIES A. Minimum Required Accountabilities for this Role (Mandatory) OCI Network Security Operations Manage and operate OCI networking components: oVCNs, Subnets, Route Tables oNSGs (Network Security Groups), Security Lists oInternet Gateway, NAT Gateway, Service Gateway oDRG (Dynamic Routing Gateway), Local Remote Peering Ensure secure and optimized traffic flow between OCI workloads, on prem systems, and external networks. Firewall SASE Security Management Manage and operate Palo Alto (VM-Series / SASE) within OCI and hybrid environments. Configure and maintain: oSecurity policies and rule bases oNAT (SNAT/DNAT) oVPNs (IPSec/SSL) oThreat prevention profiles (IPS, Anti-malware, URL filtering) Ensure consistent enforcement of security policies across OCI workloads. Security Policy Governance Automation Implement and manage firewall rule lifecycle processes: oRule creation, review, optimization, and decommissioning Drive automation of rule reviews, recertification, and policy validation using scripts/API-based solutions. Maintain standardization across NSGs, Security Lists, and firewall rules. Ingress/Egress Traffic Security Define and enforce secure ingress and egress controls for OCI applications. Implement segmentation strategies for east-west and north-south traffic flows. Ensure secure exposure of applications via load balancers, gateways, and SASE. Monitoring Incident Management Monitor firewall logs, OCI flow logs, and threat alerts. Handle 247 incident response, troubleshooting, and escalation. Perform root cause analysis (RCA) and implement proactive security improvements. Audit Compliance Management Manage network security audits (internal/external/regulatory) specific to OCI environments. Ensure compliance with organization policies and regulatory frameworks. Conduct: oFirewall rule reviews and recertification oNSG/security configuration audits oAccess and segmentation validation Track and close audit observations with proper documentation. Documentation Collaboration Maintain updated HLD, LLD, SOPs, runbooks, and security policies. Collaborate with cloud, DevOps, security, and application teams. ________________________________________ B. Additional Accountabilities (Advanced / Growth-Oriented) Security Architecture Optimization Design and optimize secure OCI network architectures with segmentation and zero-trust principles. Define best practices for VCN design, peering, DRG-based architectures, and load balancing. Automation DevSecOps Implement Infrastructure as Code (IaC) using Terraform/OCI Resource Manager. Automate firewall rules, NSG updates, compliance checks, and configuration drift detection. Integrate network security into CI/CD pipelines. Security Posture Enhancement Strengthen environment security using: oThreat intelligence oDDoS protection strategies|oContinuous monitoring and anomaly detection Integrate with SIEM/SOC tools for centralized visibility. Leadership Governance Act as technical escalation point for OCI security issues. Guide team members and vendors on best practices. Define governance models for OCI network security operations. ________________________________________ Key Decisions / Dimensions 5. DECISIONS Approve firewall rule changes, NSG policies, and security configurations. Decide segmentation strategies and ingress/egress controls. Lead decisions during security incidents and audit escalations. Recommend improvements in security architecture and tooling. DIMENSIONS Financial Dimensions Management of OCI networking/security costs and Palo Alto licensing Other Dimensions Total Team Size: ___ Direct Reports: ___ Indirect Reports: ___ OCI Environments/VCNs Managed: ___ Applications Hosted on OCI: ___ Major Challenges Maintaining consistent security posture across dynamic OCI environments. Managing complex firewall and NSG rule sets without over-permissive access. Ensuring continuous compliance with audit and regulatory expectations. Handling high-volume security alerts and incident response. Balancing agility and speed of deployment with strict security controls. Required Qualifications and Experience SKILLS AND KNOWLEDGE a) Educational Qualifications Bachelors / Masters in Computer Science, IT, or related field. b) Work Experience Certifications Must Have 58+ years in network security with cloud exposure, particularly OCI. Hands-on experience with: oOCI Networking (VCN, DRG, NSG, Peering) oPalo Alto Firewalls / SASE Strong knowledge of firewall policy management, NAT, VPNs, and segmentation. Experience in automating firewall rule review and compliance processes. Proven experience in handling security audits and compliance requirements. Good to Have Certifications: OCI Architect/Professional, PCNSE, CCNP Security. Experience with Terraform, Python, Ansible for automation. Exposure to SIEM/SOC integrations and cloud security monitoring. Soft Skills Strong ownership, audit handling capability, and stakeholder management. Excellent troubleshooting and analytical skills. Ability to work in a 247 operational environment.