Source description
About the role
Job Title: Senior Network & Edge Security Architect Location: Hyderabad, India Experience: 8+ Years Type: Full-Time (Onsite) Role Overview We are seeking a Senior Network & Edge Security Architect to design, secure, and modernize our enterprise connectivity ecosystem, SD-WAN architecture, and perimeter defenses. You will be the technical lead responsible for our Layer 2/Layer 3 networking infrastructure, edge security via Cloudflare, threat monitoring via SIEM, and hybrid cloud interconnects into AWS. The ideal candidate combines deep hands-on expertise in routing, switching, and firewalls with modern expertise in SD-WAN deployments, edge security, and threat visibility. Key Responsibilities Core Networking & SD-WAN: Design, deploy, and manage enterprise network topology, including Layer 2/Layer 3 switching, SD-WAN architecture, site-to-site WAN optimization, VLANs, VPN protocols, IPAM, and internal/external DNS. Edge & Perimeter Security: Lead the architectural setup, rule optimization, and performance tuning for Cloudflare WAF, DDoS protection, and CDN infrastructure. Firewall & Security Management: Oversee and maintain hardware/software firewalls, IPS/IDS configurations, perimeter access policies, and routing logic. Threat Detection & Compliance: Implement and refine security visibility using Wazuh (or similar SIEM) for threat detection, log analysis, and File Integrity Monitoring (FIM). Hybrid Cloud Connectivity: Extend physical data center infrastructure into AWS cloud environments using VPCs, Direct Connect, and cloud routing gateways. Cross-Functional Integration: Partner with systems and identity engineering teams to align network access controls with centralized Identity Providers (iDP) and Zero Trust frameworks. Technical Requirements (Core Essentials) Enterprise Networking & SD-WAN: Deep command of Layer 2/Layer 3 switching, routing protocols (BGP, OSPF), SD-WAN platforms (e.g., Cisco, Fortinet, Versa, Silver Peak), VLANs, VPNs, IPAM, and DNS Edge Security: Hands-on experience optimizing Cloudflare for WAF policy creation, DDoS mitigation, and CDN performance routing. Firewalls & SIEM: Hands-on expertise with next-gen hardware/software firewalls, IPS/IDS systems, and SIEM deployment (specifically Wazuh or equivalent). Hybrid Cloud: Direct experience connecting on-premises data center networks into AWS utilizing VPCs and AWS Direct Connect. Preferred Skills & Experience SD-WAN Transformation: Hands-on experience leading legacy WAN to SD-WAN migration projects to establish a unified, secure, and resilient global network infrastructure. Data Center Build & Connectivity: Practical experience with physical data center builds and ongoing management, including rack layout, cabling, power requirements, and hands-on deployment of core hardware (including, but not limited to, enterprise switches, routers, and firewalls). Identity-Aware Security: Experience integrating Cloudflare, firewalls, and SD-WAN with enterprise iDP platforms (e.g., Entra ID, Okta, Google Cloud Identity) for Zero Trust Network Access (ZTNA) and SSO. Qualifications Bachelors degree in Computer Science, Information Technology, or equivalent practical experience. At least 8+ years of experience in Network Architecture, SD-WAN Deployment, or Security Engineering. Relevant certifications (e.g., CCNP, PCNSE, CISSP, AWS Certified Advanced Networking, or vendor-specific SD-WAN certifications) are highly regarded. .