Sr. Network Security Engineer

Company Description

Bosch Global Software Technologies Private Limited is a 100% owned subsidiary of Robert Bosch GmbH, one of the world's leading global supplier of technology and services, offering end-to-end Engineering, IT and Business Solutions. With over 27,000+ associates, it's the largest software development center of Bosch, outside Germany, indicating that it is the Technology Powerhouse of Bosch in India with a global footprint and presence in the US, Europe and the Asia Pacific region.

Job Description

Roles & Responsibilities :

We are seeking a Senior IT/OT Network Engineer with a world-class foundation in Core Networking (Layer 2/3) and Secure Site-to-Site Connectivity who would be working on customer products/projects

Qualifications

SKILLS Needed:

Networking (L2/L3): Switching, STP, VLANs, BGP, OSPF, VRF, routing protocols

Firewall & Security: Cisco ASA / FTD / FMC, DMZ, Context design, segmentation

Zero Trust: ZPA / ZIA / Cisco ZTA, MFA, privileged access

Cloud - AWS (Mandatory): VPC, EC2, Transit Gateway, Direct Connect, virtual firewall

Standards (Awareness): IEC 62443, NIST CSF, ISO 27001, Purdue Model

Certifications (Preferred): CCNP / CCIE, AWS Advanced Networking, CISSP

MUST-HAVE REQUIREMENTS

• Layer 2 / Layer 3 Networking - VLANs, STP, BGP, OSPF, VRF - must have designed in real environments, hands-on configuration experience on Cisco devices (Switches/Routers/Firewalls)
• Firewall Architecture - Hands-on Cisco ASA / FTD / FMC, DMZ, Context and segmentation design
• Zero Trust - Replaced VPN with ZTA, experience with Zscaler or Cisco ZTA
• AWS Cloud Networking - VPC, EC2, Transit Gateway, Direct Connect, Security Groups, virtual firewall on EC2 - mandatory, not optional
• Standards Awareness - Knows IEC 62443, NIST CSF, ISO 27001, Purdue Model at a conceptual level - does not need deep implementation experience

CLOUD NETWORKING DETAIL

Candidate must have hands-on AWS experience. Azure or GCP knowledge is a bonus but AWS is required.

• VPC & Subnets - Design public/private subnets, route tables, internet gateway, NAT gateway
• EC2 - Launch and configure instances, assign ENIs, Elastic IPs, IAM roles, Auto Scaling
• Virtual Firewall on EC2 - Deploy Cisco FTDv, Palo Alto VM-Series, or FortiGate as EC2 instances
• Virtual Router on EC2 - Deploy software routers (Cisco CSR 1000V / VyOS), BGP peering in AWS
• Connectivity - Direct Connect, Site-to-Site VPN, Transit Gateway for hybrid and multi-site
• Security - Security Groups, NACLs, AWS Network Firewall, VPC Flow Logs, CloudTrail

STANDARDS - AWARENESS LEVEL IS ENOUGH

Candidate should be able to discuss these standards in an interview - not implement them from scratch.

IEC 62443: Industrial cybersecurity standard - security zones, conduits, and security levels

NIST CSF: Identify, Protect, Detect, Respond, Recover - risk-based security framework

ISO / IEC 27001: Information security management system (ISMS) - how security is governed

Purdue Model: Layered industrial network model - why OT/IT segmentation is designed in levels

NERC CIP: Power grid cybersecurity compliance - awareness is fine for energy sector projects

EXPERIENCE EXPECTATIONS - Mandatory

• Experience - 8 to 10 years in network engineering
• Ownership - Has owned design and implementation decisions - not just followed instructions
• Leadership - Can review team designs, mentor engineers, and drive technical direction along with hands-on demonstration of core skills mentioned above
• Communication - Comfortable speaking to executives, customers, and compliance teams
• Certifications: CCNP

WHAT TO LOOK FOR IN A RESUME

• Job Titles - Sr. Network Security Engineer
• Cloud Projects - VPC designs, hybrid connectivity, virtual firewall/router deployments on EC2
• Certifications (Good-to-have) - CCIE, AWS Certified Advanced Networking, AWS Solutions Architect, CISSP

GOOD TO HAVE - NOT MANDATORY

• Any OT / SCADA exposure - even at project or client level
• Azure or GCP networking - as an addition to AWS
• Infrastructure as Code - Terraform, CloudFormation, or Ansible for network automation

QUALIFICATIONS

BTech / BCA / MCA

Experience: 8 yrs - 10 yrs