{"id":3746816,"url":"https://alion.io/job/hcltech-technical-specialist-git-9","title":"Technical Specialist-GIT","company":{"id":225,"name":"HCLTech","domain":"hcltech.com","url":"https://alion.io/company/hcltech","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Sales","role_family":"Sales","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Noida, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"AIOps","optional":false},{"name":"AWS","optional":false},{"name":"AWS WAF","optional":false},{"name":"Azure","optional":false},{"name":"BGP","optional":false},{"name":"CI/CD","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"DNS","optional":false},{"name":"FortiGate","optional":false},{"name":"GCP","optional":false},{"name":"ISO 27001","optional":false},{"name":"ITIL","optional":false},{"name":"ITSM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"MPLS","optional":false},{"name":"OSPF","optional":false},{"name":"OWASP","optional":false},{"name":"PCI DSS","optional":false},{"name":"Scrum","optional":false},{"name":"Service Mesh","optional":false},{"name":"ServiceNow","optional":false},{"name":"SOC 2","optional":false},{"name":"Suricata","optional":false},{"name":"VLAN","optional":false},{"name":"VPN","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-11-04T13:31:48Z","employer_posted_date":"2026-11-04","last_verified_at":"2026-11-06T10:43:51Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Job Summary\nThe Cloud Network & Firewall Engineer - L3 is a senior technical authority responsible for the end-to-end architecture, governance, and continuous improvement of multi-cloud network and security infrastructure across AWS, Microsoft Azure, and Google Cloud Platform. This role goes beyond operational management: the L3 engineer drives strategic network design decisions, leads complex technical escalations from L1/L2 teams, defines standards and reference architectures, and acts as a bridge between engineering execution and organizational leadership. The role requires deep expertise across cloud-native networking, advanced firewall technologies, automation engineering, and compliance frameworks\nKey Responsibilities\nMulti-Cloud Network Architecture & Design Architect enterprise-grade multi-cloud and hybrid network topologies including hub-and-spoke, full mesh, and multi-region active-active designs across AWS, Azure, and GCP. Define reference architectures for VPC/VNet segmentation, transit routing, and shared services models aligned to business and compliance requirements. Lead the design and implementation of advanced routing strategies using BGP with communities, route filtering, and policy-based routing across cloud and on-premises environments. Architect and oversee private connectivity: AWS Direct Connect (hosted and dedicated), Azure ExpressRoute (circuits, Global Reach, Fast Path), and GCP Cloud Interconnect (VLAN attachments, Partner Interconnect). Design DNS architectures including split-horizon DNS, conditional forwarding, and resolver endpoint strategies across AWS Route 53 Resolver, Azure Private DNS Resolver, and GCP Cloud DNS. Establish IP address management (IPAM) strategy and governance across multi-cloud environments, preventing overlap and enabling scalable growth. Evaluate and recommend network service mesh and service-level networking solutions for microservices and Kubernetes workloads. Advanced Firewall Architecture & Security Design Design and govern enterprise firewall policy frameworks across AWS Network Firewall, Azure Firewall Premium, GCP Cloud Armor, and third-party NGFWs (Palo Alto, Fortinet, Check Point). Architect zero-trust network access (ZTNA) models, micro segmentation strategies, and east-west traffic inspection across cloud environments. Define and enforce security group, NSG, and VPC firewall rule standards at scale using policy-as-code, tagging, and automated compliance checks. Lead threat landscape analysis for cloud network environments; design DDoS mitigation, IDS/IPS placement, and anomaly detection architectures. Oversee WAF rule strategy and tuning across AWS WAF, Azure WAF, and GCP Cloud Armor, including OWASP rule sets, rate limiting, and bot management. Conduct architectural security reviews and threat modelling sessions for new cloud deployments and network design changes. Evaluate and deploy TLS/SSL inspection architectures within cloud firewall services while managing certificate lifecycle. Technical Leadership & Escalation Serve as the final technical escalation point (L3) for critical, complex, or unresolved network and firewall incidents from L1/L2 teams. Lead war-room bridges for P1/P2 incidents; drive rapid root cause identification and coordinate cross-functional resolution. Conduct deep-packet analysis, flow analysis, and advanced diagnostics for persistent or elusive network issues. Produce high-quality post-incident reports and architecture improvement recommendations to prevent recurrence. Review and approve complex change requests; provide technical risk assessment for high-impact changes. Mentor and coach L1/L2 engineers; develop internal knowledge through structured sessions, runbooks, and design documents. Governance, Compliance & Standards Define, publish, and maintain cloud network architecture standards, design patterns, and guardrails for the organization. Ensure all cloud network configurations adhere to CIS Benchmarks, NIST SP 800-53, ISO 27001, SOC 2, PCI-DSS, and relevant industry frameworks. Lead network-related workstreams in internal and external audits; own remediation plans and track closure of findings. Establish network security baselines and conduct periodic posture assessments using cloud-native tools (AWS Security Hub, Microsoft Defender for Cloud, GCP Security Command Center). Contribute to data residency, sovereignty, and regulatory compliance strategies for multi-region cloud deployments. Vendor, Stakeholder & Program Management Engage with AWS, Microsoft Azure, and GCP technical account teams for roadmap alignment, architectural guidance, and issue escalation. Evaluate and lead procurement decisions for network tooling, NGFW platforms, S\nSkill Requirements\nRequired Skills & Qualifications\nExperience\n7-12 years of progressive experience in network engineering, with a strong focus on cloud and hybrid environments.\nMinimum 4+ years of hands-on, production-level experience across at least two of the three major cloud platforms: AWS, Azure, or GCP.\nDemonstrated experience architecting and governing enterprise-scale multi-cloud network and firewall solutions.\nTrack record of leading complex incident resolution, architectural reviews, and cross-functional technical programs.\nTechnical Skills Matrix\n\nCategory\n\nSkills, Platforms & Depth\n\nAWS Networking (Expert)\n\nVPC advanced design, TGW + inter-region peering, Direct Connect (LAG, failover), Route 53 Resolver, AWS Network Firewall (Suricata rules), AWS WAF (custom rules), Gateway Load Balancer (GWLB), IPv6 dual-stack, AWS PrivateLink at scale, VPC Reachability Analyzer\n\nAzure Networking (Expert)\n\nvWAN (secured hub, routing intent), ExpressRoute (Global Reach, FastPath, MACsec), Azure Firewall Premium (IDPS, TLS inspection), Azure WAF (custom rules, bot protection), Private Endpoint governance, Virtual Network Manager, Azure Network Watcher advanced diagnostics\n\nGCP Networking (Expert)\n\nShared VPC, hierarchical firewall policies, Cloud NAT HA design, HA VPN (dynamic routing), Cloud Interconnect (VLAN attachments, MED tuning), Cloud Armor advanced rules (Adaptive Protection), Network Connectivity Center, Private Service Connect, Network Intelligence Center\n\nNetwork Protocols (Advanced)\n\nBGP (multi-path, communities, route-maps, policy), OSPF, EIGRP, advanced NAT/PAT, QoS, MPLS/SR-MPLS concepts, BFD, ECMP, GRE/IPsec tunnelling, PBR, IPv4/IPv6 dual-stack\n\nFirewall & Security (Expert)\n\nPalo Alto PAN-OS (Panorama, App-ID, User-ID, SSL-TI, Wildfire), Fortinet FortiGate (FortiManager, FortiAnalyzer), Check Point (SmartConsole, R81.x), Zero Trust architecture, microsegmentation, ZTNA, cloud-native NGFWs\n\nSecurity & Compliance\n\nCIS Benchmarks, NIST SP 800-53, ISO 27001, PCI-DSS, SOC 2, AWS Security Hub, Microsoft Defender for Cloud, GCP SCC, cloud posture management (CSPM)\n\nITSM & Leadership\n\nServiceNow (change, incident, CMDB, ITOM), ITIL v4 practitioner, Agile/Scrum, technical documentation, pre-sales support, stakeholder management\n\nOther Requirements\nRequired & Preferred Certifications\n\nAmazon Web Services (AWS)\n\nMicrosoft Azure\n\nGoogle Cloud Platform (GCP)\n\nAWS Certified Advanced Networking - Specialty (Required)\nAWS Certified Security - Specialty\nAWS Solutions Architect - Professional\n\nAZ-700: Azure Network Engineer Associate (Required)\nAZ-500: Azure Security Engineer Associate\nAZ-305: Azure Solutions Architect Expert\n\nGoogle Professional Cloud Network Engineer (Required)\nGoogle Professional Cloud Security Engineer\nGoogle Professional Cloud Architect\n\nAdditional highly valued certifications: CCIE Enterprise / Data Center / Security, Palo Alto PCNSE, Fortinet NSE 7/8.\nL3 Differentiators (What Sets This Role Apart from L2)\n\nDimension\n\nL2 Scope\n\nL3 Scope (This Role)\n\nEscalation\n\nHandles L1 escalations; resolves most incidents independently\n\nFinal escalation point; resolves novel, critical, and complex issues with no precedent\n\nArchitecture\n\nImplements defined designs; proposes improvements\n\nOwns end-to-end reference architectures; sets organizational standards\n\nAutomation\n\nWrites scripts and uses IaC for provisioning tasks\n\nDesigns automation frameworks; builds CI/CD pipelines; drives AIOps strategy\n\nSecurity Design\n\nManages firewall rules and security policy execution\n\nDefines zero-trust strategy; leads threat modelling; governs posture at scale\n\nLeadership\n\nMentors peers; contributes to knowledge base\n\nCoaches L1/L2 teams; leads design reviews; engages senior stakeholders\n\nVendor Engagement\n\nRaises tickets with vendor support\n\nLeads vendor architectural discussions; influences product roadmaps\n\nCompliance\n\nApplies existing compliance controls to configurations\n\nDefines compliance frameworks; leads audit engagements; owns remediation programs\n\nBehavioral & Leadership Competencies\nExceptional analytical depth - ability to reason through novel, undocumented, or multi-system problems independently.\nExecutive-level communication: capable of translating complex technical risk into business-impact language for senior stakeholders.\nInfluential leadership - drives consensus and technical direction across cross-functional teams without direct authority.\nStrong ownership mindset - takes accountability for architectural outcomes, not just task completion.\nContinuous learning orientation - proactively tracks cloud platform releases, threat intelligence, and industry trends.\nMentorship and talent development - invests in building capability within the wider network engineering team.\nComfortable operating with ambiguity in fast-evolving environments with competing priorities.","description_format":"text","description_chars":9575,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Professional Services","Science & Engineering","Systems Integrators"],"lifecycle":[{"event":"open","at":"2026-11-04T13:31:48Z"}],"visa":[],"liveness":{"score":99,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.993,"p_room":1,"age_days":1,"expected_fill_days":28,"reasons":["conf:0","wave","velocity","win:early","comp:brand"],"computed_at":"2026-11-06T05:58:05Z"},"pay":null,"html_url":"https://alion.io/job/hcltech-technical-specialist-git-9","json_url":"https://alion.io/job/hcltech-technical-specialist-git-9.json","meta":{"generated_at":"2026-11-06T13:31:54Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":24842,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":225},"rest":"https://alion.io/mcp/rest/get_company?id=225"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhcltech-technical-specialist-git-9"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhcltech-technical-specialist-git-9"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhcltech-technical-specialist-git-9"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/hcltech-technical-specialist-git-9\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhcltech-technical-specialist-git-9"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3746816}},{"tool":"search_jobs","arguments":{"company":"hcltech.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3746816},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}