Cloud Network & Security Expert

Role: Cloud Network & Security Expert

Location: Hyderabad

Our Team:

Our team is engaged in designing and delivering Digital Tech Services for all CHC worldwide.

We deliver our solutions in a highly competitive market answering FMCH needs and sometimes supporting highly regulated environments (GxP, SoX and other regional and local regulations).

Our team operates in an international context, serving all markets in most of the countries around the world.

To reach our goals we have organised our model around 6 main pillars:

• Enterprise architecture
• Infrastructure & Engineering Platforms
• Operations
• Integration
• Strategy & operations

Main responsibilities

The Cloud Network & Security Expert is a strong technical expert, with proven expertise able to lead projects to be executed in various countries. She/He will handle the following areas:

Networks carve-out and segmentation:

• Lead and execute network segmentation and carve-out strategies, ensuring seamless transition, integrity and security of network systems.
• Manage complexities associated with disentangling integrated systems, maintaining operational excellence during the separation process.

Regulatory compliance and industry-specific requirements:

• Ensure network compliance with pharmaceutical industry regulations, including FDA, HIPAA, and other relevant standards.
• Ensure compliance with Cybersecurity and data protection regulations (GDPR, LPM in France, Kritis in Germany, CSL in China, etc.).
• Develop and communicate regular reports on the effectiveness of network implementation, lifecycle, and operations to leadership.
• Adapt network and security strategies to meet the unique requirements of office locations, coworking spaces, and manufacturing sites.
• Implement advanced cybersecurity measures to protect sensitive data, intellectual property, and patient information.
• Develop strategies for advanced threat detection and response in a segmented network environment.

Business continuity and disaster recovery:

• Implement consistent network monitoring and management solutions
• Collaborate with support structures for risk management, security patch management, vulnerability management, and vendor management
• Design and implement network and security solutions supporting business continuity and disaster recovery.
• Build resilient network infrastructures to maintain operations during the network reorganization.

Cross-functional collaboration and project management:

• Work closely with various departments and external stakeholders to ensure alignment of network and security infrastructure with business objectives.
• Lead cross-functional teams through complex network transformations, ensuring timely and effective execution.
• Regularly educate and empower leadership teams, business stakeholders, and operational teams on network importance and best practices

About you

Technical background required

• Lead the design and implementation of cloud network and security architectures in Azure, ensuring scalability, reliability, and alignment with business needs.
• Implement best practices for network segmentation, routing, load balancing, and performance optimization.
• Develop and deploy automation scripts and templates using Terraform, Python, and Ansible.
• Lead applications migration from DC on-premises towards Azure following SASE/ZTNA architecture.
• Multicloud interconnection experience: Proven experience in designing, implementing, and managing multicloud interconnection strategies. Demonstrated ability to integrate and optimize connectivity between multiple cloud environments (e.g., AWS, Azure, Google Cloud) to ensure seamless data flow, security, and performance.
• Design and implement security architectures for cloud environments, including but not limited to Vnets, ExpressRoute, vWAN, NSG, Azure Firewall, AzureDDOS protection, WAF, Load Balancers, App Gateways, traffic manager, Front door, Private links.
• Develop and assess cloud security solutions, enforce security policies, and conduct regular security assessments.
• Monitor and analyse logs, perform vulnerability assessments, and manage security incident response.
• Good knowledge of DNS management, Internal and external registries.
• Strong understanding of IaaS, PaaS, SaaS, and cloud security platforms (Azure, AWS, GCP).
• Experience with cybersecurity tools and software applications (Desirable Zscaler).
• Collaborate with Cybersecurity teams on infrastructure or application security compliance.
• 8+ years of relevant work experience as an IT Network/Security Design, Implementation and Administration in global companies focusing on Cloud.
• A proven track record in successfully leading network segmentation or carve-outs, especially in multinational corporations.
• In-depth knowledge of networking concepts, protocols, and technologies for LAN, WAN,        WLAN, and SD-WAN including but not limited to TCP/IP, TLS, DNS, DHCP, HTTPs, FHRP, STP, QoS, 802.1q, 802.1x, ssl/ipsec VPN, routing protocols (OSPF, BGP), and network and security principles.
• Create and maintain comprehensive network and security documentation, including network diagrams, configurations, standards, and technical specifications.
• Demonstrated ability to troubleshoot complex network and security issues, with a proactive approach to problem-solving.
• Strong project management skills, with experience managing large-scale network projects, including resource allocation, timeline management, and budgeting.
• Leadership experience in guiding technical teams and collaborating effectively with cross-functional stakeholders.
• Continuous professional development and up-to-date knowledge of the latest network technologies and security trends.  
• Certifications such as AZ-700, AZ-500, AZ-305, CCNP, CCIE, CISSP, CISM or relevant are appreciated

Good to have it

• Hands-on scripting/programming experience for automation (e.g., PowerShell, Python, Terraform).
• Hands-on experience with Zscaler.
• Hands-on with other public cloud providers (AWS, GCP).
• Knowledge in WLAN (Aruba + ClearPass), firewalls (Palo Alto), Load Balancer (F5 BigIP), Prisma SD-WAN, ISE (Tacacs).
• Familiarity with SCADA LAN v2 architecture for industrial/factory
• Proficiency in IoT networking, particularly in the context of manufacturing environments, and experience with network configurations in coworking spaces and office locations
• Experience with Jira, Confluence and ServiceNow.

Soft skills required

• Demonstrated ability to lead and inspire technical teams, fostering a collaborative and productive work environment.
• Exceptional verbal and written communication skills in English, with the ability to clearly convey complex technical concepts to non-technical stakeholders.
• Proficiency in preparing detailed reports and presentations for leadership, ensuring transparency and understanding of network and security initiatives and their impact.
• Ability to think strategically, foresee potential challenges and develop proactive solutions.
• Strong problem-solving skills, with a creative and analytical approach to overcoming obstacles and finding effective solutions in a dynamic environment.
• Commitment to ongoing personal and professional development, staying abreast of the latest industry trends and technological advancements.