EY-Cybersecurity-Network Security And Security Infrastructure Operations-Manager

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

EY - Cybersecurity Manager, Network Security & Security Infrastructure Operations

Overview

As a Manager in EY’s Cybersecurity practice, you will play a key role in delivering advanced Network Security Operations and Security Infrastructure Management services across multiple client environments. We are seeking cybersecurity professionals with hands-on expertise in next-generation firewalls, web application security, email security, network access control, DDoS protection, and security monitoring platforms.

The role involves administration, deployment, optimization, and operational support of enterprise security technologies such as Cisco FTD, Palo Alto NGFW, Fortinet NGFW, Check Point Quantum Security Gateways, Zscaler, Netskope Security Cloud, F5 XC WAF, Cloudflare WAF, Cisco ISE, Aruba ClearPass Policy Manager, Trend Micro, Proofpoint Email Protection, EfficientIP, Infoblox Threat Defense, NETSCOUT Arbor, or Radware DefensePro. The successful candidate will contribute to maintaining secure, resilient, and highly available security infrastructures across complex enterprise environments.

The Opportunity

We are seeking cybersecurity professionals with 12+ years of experience in Network Security Operations, Security Infrastructure Engineering, Managed Security Services, or Cybersecurity Consulting.

The ideal candidate will possess strong technical expertise in enterprise security technologies, be capable of troubleshooting complex security issues, supporting critical incidents, and contributing to security transformation initiatives for clients across multiple industries.

Key Responsibilities

Next-Generation Firewall (NGFW) Operations

• Administer and support enterprise network security environments, such as Next-Generation Firewalls (NGFWs), security gateways, and related network security technologies from leading vendors such as Cisco, Fortinet, Palo Alto Networks, Check Point, or equivalent platforms.
• Configure and manage security policies, NAT policies, VPN configurations, and access control rules.
• Perform firewall rule reviews, optimization, and recertification activities.
• Support firewall migrations, upgrades, patching, and lifecycle management.
• Troubleshoot network security incidents and connectivity issues.
• Monitor firewall health, performance, and operational status.
• Conduct configuration validation and security baseline reviews.
• Support change implementation and maintenance activities within client environments.
• Manage centralized policy deployment and firewall administration.
• Support device onboarding and configuration management activities.
• Ensure configuration consistency and compliance across multiple security appliances.
• Generate operational reports, dashboards, and compliance metrics.
• Support disaster recovery and high-availability configurations.

Web, DNS & Internet Security Operations

• Administer and maintain Zscaler Internet Access (ZIA) environments, Netskope Security Cloud, or equivalent secure web gateway and cloud-delivered security platforms.
• Configure URL filtering, cloud security policies, and secure internet access controls.
• Support web security investigations and internet access troubleshooting.
• Manage and optimize EfficientIP DNS security controls, Infoblox Threat Defense, or equivalent DNS security solutions.
• Investigate DNS-related threats, anomalies, and security incidents.
• Support implementation of security best practices for internet-facing infrastructure.

Web Application Security & WAF Administration

• Administer and support tools such as F5 Distributed Cloud (XC) Web Application Firewall environments, Cloudflare WAF, Check Point CloudGuard WAF, or equivalent web application and API protection technologies.
• Configure WAF policies, signatures, and application protection controls.
• Monitor and investigate web application security alerts and incidents.
• Tune WAF policies to minimize false positives and improve protection effectiveness.
• Support security assessments and remediation activities for externally facing applications.
• Collaborate with application teams during onboarding and troubleshooting activities.

IPS/IDS & Threat Detection Operations

• Administer Fortinet IPS/IDS technologies and associated detection mechanisms, Cisco Secure Firewall IPS, Palo Alto Threat Prevention, or equivalent network threat-detection technologies.
• Monitor security alerts and potential intrusion activity.
• Investigate suspicious traffic and support incident response activities.
• Tune detection signatures and alerting use cases.
• Maintain visibility into network threats and malicious activities.

Email Security Operations

• Administer Trend Micro Email Gateway security platforms, Proofpoint Email Protection, Cloudflare Email Security, or equivalent secure email gateway technologies.
• Manage anti-spam, anti-malware, phishing, and email filtering controls.
• Investigate email security incidents and phishing campaigns.
• Support policy tuning and email threat response activities.
• Monitor email security platform health and effectiveness.

Network Access Control (NAC)

• Administer Cisco Identity Services Engine (ISE) environments, Aruba ClearPass Policy Manager, Forescout Platform, or equivalent Network Access Control technologies.
• Manage authentication, authorization, and accounting (AAA) policies.
• Configure device profiling and network access controls.
• Support endpoint onboarding, posture assessment, and access governance activities.
• Troubleshoot authentication and connectivity issues across enterprise networks.

Anti-DDoS Protection

• Administer and maintain NETSCOUT Arbor anti-DDoS platforms, Radware DefensePro, Cloudflare DDoS Protection, or equivalent DDoS protection solutions.
• Monitor and respond to volumetric, protocol, and application-layer attacks.
• Support DDoS mitigation and incident response activities.
• Conduct attack analysis and reporting.
• Ensure operational readiness of DDoS protection mechanisms.

Security Operations & Service Delivery

• Support daily network security operations activities across multiple client environments.
• Participate in security incident investigations and problem management activities.
• Execute operational changes, upgrades, and maintenance activities.
• Maintain technical documentation, operational procedures, and knowledge repositories.
• Collaborate with internal teams, vendors, and client stakeholders.
• Support service reviews, audits, and compliance requirements.
• Contribute to continuous improvement and automation initiatives.

Skills and Attributes for Success

• Strong knowledge of enterprise network security technologies and architectures.
• Experience with Next-Generation Firewalls (NGFW), IPS/IDS, WAF, NAC, Email Security, and DDoS Protection.
• Understanding of TCP/IP, routing, switching, VPNs, and security protocols.
• Strong analytical, troubleshooting, and problem-solving skills.
• Ability to support multiple client environments simultaneously.
• Excellent communication and stakeholder management skills.
• Experience working in Managed Security Services (MSSP) or large enterprise environments.
• Ability to operate effectively in a fast-paced operational environment.
• Strong customer-focused and service-oriented mindset.

To Qualify for the Role, You Must Have

• B. Tech, M. Tech, or equivalent degree in Computer Science, Information Security, Electronics, Networking, or related disciplines.
• 12+ years of relevant cybersecurity and network security experience.
• Hands-on experience with at least foure or more of the following technologies:
• Cisco FTD Firewall
• Palo Alto NGFW
• Fortinet NGFW
• Check Point Quantum Security Gateways
• Cisco FMC
• Palo Alto Panorama
• Check Point Security Management
• Cisco ISE
• Aruba ClearPass Policy Manager
• Forescout Platform
• Zscaler Internet Access (ZIA)
• Netskope Security Cloud
• F5 XC WAF
• Cloudflare WAF
• Check Point CloudGuard WAF
• NETSCOUT Arbor
• Radware DefensePro
• Cloudflare DDoS Protection
• Trend Micro Security Solutions
• Proofpoint Email Protection
• Cloudflare Email Security
• EfficientIP
• Infoblox Threat Defense
• Strong understanding of firewall policy management and network security operations.
• Experience supporting security incidents and operational escalations.
• Strong verbal and written communication skills.
• Knowledge of scripting and automation using Python, PowerShell, or REST APIs is an advantage.

What We Look For

Professionals who are passionate about network and infrastructure security, possess strong technical expertise, and demonstrate a proactive approach to protecting enterprise environments. Successful candidates will have a strong sense of ownership, operational excellence, customer focus, and the ability to deliver high-quality cybersecurity services while collaborating effectively within global teams.

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.