{"id":3746811,"url":"https://alion.io/job/hcltech-technical-specialist-git-8","title":"Technical Specialist-GIT","company":{"id":225,"name":"HCLTech","domain":"hcltech.com","url":"https://alion.io/company/hcltech","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Sales","role_family":"Sales","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Noida, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AIOps","optional":false},{"name":"Amazon CloudWatch","optional":false},{"name":"Anomaly Detection","optional":false},{"name":"Ansible","optional":false},{"name":"AWS","optional":false},{"name":"AWS WAF","optional":false},{"name":"Azure","optional":false},{"name":"BGP","optional":false},{"name":"Bicep","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"CloudFormation","optional":false},{"name":"DNS","optional":false},{"name":"Dynatrace","optional":false},{"name":"FortiGate","optional":false},{"name":"GCP","optional":false},{"name":"Grafana","optional":false},{"name":"ISO 27001","optional":false},{"name":"ITIL","optional":false},{"name":"ITSM","optional":false},{"name":"Jira","optional":false},{"name":"Least Privilege","optional":false},{"name":"MPLS","optional":false},{"name":"OSPF","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"ServiceNow","optional":false},{"name":"Splunk","optional":false},{"name":"TCP/IP","optional":false},{"name":"Terraform","optional":false},{"name":"VLAN","optional":false},{"name":"VPN","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-11-04T13:31:48Z","employer_posted_date":"2026-11-04","last_verified_at":"2026-11-06T05:36:00Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Job Summary\nThe Cloud Network & Firewall Engineer - L2 is responsible for the design, implementation, management, and troubleshooting of network and security infrastructure across AWS, Microsoft Azure, and Google Cloud Platform environments. This role operates as an escalation point from L1 support, handling complex incidents, change requests, and proactive improvement initiatives for cloud-native and hybrid network architectures\nKey Responsibilities\nMulti-Cloud Network Operations\nDesign, configure, and manage VPCs (AWS), VNets (Azure), and VPCs (GCP) including subnets, route tables, and peering connections.\nConfigure and troubleshoot AWS Transit Gateway, Azure Virtual WAN, and GCP Cloud Router for hub-and-spoke and mesh connectivity.\nManage BGP and static routing across cloud environments and on-premises interconnects (AWS Direct Connect, Azure ExpressRoute, GCP Cloud Interconnect).\nMaintain DNS resolution strategies including AWS Route 53, Azure Private DNS, and GCP Cloud DNS integration with on-prem resolvers.\nAdminister load balancers: AWS ALB/NLB, Azure Application Gateway / Load Balancer, and GCP Cloud Load Balancing.\nFirewall & Network Security\nDeploy, configure, and manage cloud-native firewalls: AWS Network Firewall, Azure Firewall (Standard/Premium), and GCP Cloud Armor / Firewall Policies.\nManage NGFWs in cloud environments including Palo Alto VM-Series, Fortinet FortiGate-VM, and Check Point Cloud Guard where applicable.\nCreate and maintain security group (SG) and network ACL (NACL) policies in AWS; NSG and ASG rules in Azure; VPC firewall rules and hierarchical policies in GCP.\nPerform firewall policy reviews, rule optimization, and access path analysis to enforce least-privilege principles.\nInvestigate and resolve firewall-related incidents, including blocked traffic, misconfigurations, and policy conflicts.\nConfigure and manage WAF policies across AWS WAF, Azure WAF, and GCP Cloud Armor for application-layer protection.\nIncident & Change Management\nAct as L2 escalation point for network and firewall incidents triaged by L1 support.\nDiagnose and resolve complex issues including packet loss, asymmetric routing, MTU mismatches, VPN instability, and latency spikes.\nRaise, assess, and implement change requests following ITIL-based change management processes (ServiceNow or equivalent ITSM tools).\nMaintain detailed RCA (Root Cause Analysis) documentation for major incidents.\nParticipate in on-call rotations and provide timely resolution within defined SLA windows.\nConnectivity & Hybrid Networking\nManage site-to-site and client VPN solutions: AWS Client VPN / Site-to-Site VPN, Azure VPN Gateway / Point-to-Site, and GCP Cloud VPN (HA VPN).\nImplement and maintain SD-WAN overlays and cloud on-ramps where applicable.\nManage private connectivity services and ensure redundancy via dual tunnels, BGP failover, and cross-AZ/zone resilience.\nCoordinate with ISPs, colocation providers, and WAN vendors for circuit provisioning and fault resolution.\nMonitoring, Alerting & Automation\nUtilize native monitoring tools: AWS CloudWatch / VPC Flow Logs, Azure Monitor / NSG Flow Logs, and GCP Cloud Logging / Network Intelligence Center.\nConfigure network-layer alerts and dashboards using tools such as Splunk, Grafana, or Dynatrace.\nLeverage infrastructure-as-code (IaC) for network provisioning using Terraform, AWS CloudFormation, or Azure Bicep.\nDevelop automation scripts (Python/Bash/PowerShell) for firewall rule lifecycle management, report generation, and network audit tasks.\nSupport AIOps-driven network automation initiatives including anomaly detection, auto-remediation workflows, and proactive health reporting.\nDocumentation & Compliance\nMaintain accurate and up-to-date network diagrams, IP address management (IPAM) records, and runbooks.\nEnsure cloud network configurations comply with CIS Benchmarks, NIST, ISO 27001, or client-specific security standards.\nParticipate in internal and external security audits; provide evidence and remediation for network-related findings.\nContribute to knowledge base articles and post-implementation reviews.\nSkill Requirements\nRequired Skills & Qualifications\nExperience\n3-6 years of hands-on experience in network and/or network security engineering.\nMinimum 2+ years of demonstrated experience in at least two of the three major cloud platforms: AWS, Azure, or GCP.\nProven experience managing firewalls in cloud environments (native and/or NGFW).\nTechnical Skills\n\nCategory\n\nSkills & Tools\n\nAWS Networking\n\nVPC, TGW, Direct Connect, Route 53, ALB/NLB, AWS Network Firewall, AWS WAF, Security Groups, NACLs, CloudWatch, VPC Flow Logs\n\nAzure Networking\n\nVNet, VNet Peering, ExpressRoute, VPN Gateway, Azure Firewall, Azure WAF, NSG, ASG, Azure Monitor, Network Watcher\n\nGCP Networking\n\nVPC, Cloud Router, Cloud Interconnect, Cloud VPN (HA VPN), GCP Firewall Rules, Cloud Armor, VPC Flow Logs, Network Intelligence Center\n\nNetwork Protocols\n\nTCP/IP, BGP, OSPF, EIGRP, VLAN/802.1Q, STP, QoS, NAT/PAT, IPv4/IPv6, MPLS basics\n\nFirewall Platforms\n\nPalo Alto (PAN-OS), Fortinet FortiGate, Check Point, Cisco ASA/FTD (familiarity), AWS/Azure/GCP native firewalls\n\nSecurity Concepts\n\nZero Trust, microsegmentation, least-privilege access, ZTNA, DDoS protection, IDS/IPS, TLS inspection\n\nAutomation & IaC\n\nTerraform, Python/Bash scripting, AWS CloudFormation, Azure Bicep, Ansible (preferred)\n\nITSM Tools\n\nServiceNow, Jira, Remedy - change management, incident handling, CMDB updates\n\nMonitoring Tools\n\nSplunk, Grafana, Dynatrace, SolarWinds, CloudWatch, Azure Monitor\n\nPreferred Certifications\n\nAmazon Web Services (AWS)\n\nMicrosoft Azure\n\nGoogle Cloud Platform (GCP)\n\nAWS Certified Advanced Networking - Specialty\nAWS Certified Security - Specialty\nAWS Solutions Architect - Associate / Professional\n\nAZ-700: Azure Network Engineer Associate\nAZ-500: Azure Security Engineer Associate\nAZ-104: Azure Administrator Associate\n\nGoogle Professional Cloud Network Engineer\nGoogle Professional Cloud Security Engineer\nGoogle Associate Cloud Engineer\n\nOther Requirements\nPreferred Certifications\n\nAmazon Web Services (AWS)\n\nMicrosoft Azure\n\nGoogle Cloud Platform (GCP)\n\nAWS Certified Advanced Networking - Specialty\nAWS Certified Security - Specialty\nAWS Solutions Architect - Associate / Professional\n\nAZ-700: Azure Network Engineer Associate\nAZ-500: Azure Security Engineer Associate\nAZ-104: Azure Administrator Associate\n\nGoogle Professional Cloud Network Engineer\nGoogle Professional Cloud Security Engineer\nGoogle Associate Cloud Engineer\n\nAdditional valued certifications: CCNP Enterprise/Security, Palo Alto PCNSE, Fortinet NSE 4/7, CISSP, CompTIA Security+","description_format":"text","description_chars":6649,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Professional Services","Science & Engineering","Systems Integrators"],"lifecycle":[{"event":"open","at":"2026-11-04T13:31:48Z"}],"visa":[],"liveness":{"score":99,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.993,"p_room":1,"age_days":1,"expected_fill_days":23,"reasons":["conf:0","wave","velocity","win:early","comp:brand"],"computed_at":"2026-11-06T05:58:05Z"},"pay":null,"html_url":"https://alion.io/job/hcltech-technical-specialist-git-8","json_url":"https://alion.io/job/hcltech-technical-specialist-git-8.json","meta":{"generated_at":"2026-11-06T07:45:49Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13832,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":225},"rest":"https://alion.io/mcp/rest/get_company?id=225"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhcltech-technical-specialist-git-8"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhcltech-technical-specialist-git-8"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhcltech-technical-specialist-git-8"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/hcltech-technical-specialist-git-8\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhcltech-technical-specialist-git-8"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3746811}},{"tool":"search_jobs","arguments":{"company":"hcltech.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3746811},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}