Senior SecOps Engineer

Act as the technical SME on network security, firewalls (FortiGate, Palo Alto, Check Point, or similar), and DevSecOps across presales and delivery engagements. Lead the design and review of secure cloud and hybrid architectures: network segmentation, Zero Trust, IAM, WAF, SIEM/SOAR. Own firewall and network security architecture design, sizing, and migration, including HA/failover, VPN, and segmentation. Design and implement DevSecOps pipelines: security-as-code, SAST/DAST/SCA integration, and policy-as-code. Apply cloud security best practices to protect applications, data, and infrastructure across IaaS/PaaS/SaaS. Provide technical presales support: SME sessions, security assessments, proposals, and statements of work for security engagements. Support incident response, threat detection, and vulnerability management across cloud/hybrid environments. Contribute to security governance: compliance mapping (ISO 27001, NIST, CIS Benchmarks), risk assessments, and client security reviews. Maintain and evolve the SecOps knowledge base, security policies, and playbooks. Mentor mid-level SecOps engineers and contribute to internal security capability building.

Desired Candidate Profile

Bachelor's degree in Computer Science, Engineering, or related field. 6+ years of hands-on experience in cloud/network security, with demonstrated SME-level depth in at least two of: network security, firewalls, DevSecOps. Proven expertise with enterprise firewall platforms (FortiGate, Palo Alto, Check Point, or similar) design, migration, and HA/failover. Hands-on expertise in cloud security controls: WAF, IAM, SCPs, Secrets Management, KMS, CASB, DLP, SIEM/SOAR across AWS, Azure, and/or GCP. Strong proficiency in Infrastructure as Code and Security as Code (Terraform, CloudFormation, Azure ARM). Solid knowledge of network security fundamentals: VPNs, IDS/IPS, micro-segmentation, Zero Trust. Practical experience with container/Kubernetes security (admission controllers, service mesh, runtime scanning, policy enforcement). Experience integrating security into CI/CD pipelines (SAST/DAST/SCA tools, policy-as-code). Working knowledge of compliance frameworks: ISO 27001, SOC 2, GDPR, CIS Benchmarks. Proficiency in automation/scripting (Python, Bash, or PowerShell) for security tasks. Certificates: Fortinet NSE4+ or Palo Alto PCNSE (or equivalent), plus a cloud security certification (AWS/Azure/GCP Security Specialty) or CISSP/CCSP.