Network Security Compliance Check & Remediation Engineer

Role overview

Network Security Compliance Check & Remediation Engineer at Applied Cloud Computing

We are seeking a highly skilled Network Security Compliance Check & Remediation Engineer responsible for ensuring that network and security infrastructure complies with internal security standards, regulatory requirements, and industry best practices.

– Network Security Compliance Check & Remediation Engineer Position Title Network Security Compliance Check & Remediation Engineer Experience 3–8 Years (L2/L3 depending on experience) Location India (Hybrid/Onsite) Department Network Security & Compliance

The candidate will perform security compliance assessments, identify gaps, drive remediation activities, and work closely with network, cloud, security, and operations teams to maintain a secure and compliant environment.

The role requires strong expertise in network security technologies, firewall management, security hardening, vulnerability management, access governance, change management, and compliance auditing.

Responsibilities

• Firewall & Security Policy Compliance
• Conduct periodic firewall rule reviews and security policy audits.
• Identify and remediate: o Zero-hit firewall rules o Redundant or duplicate rules o Expired temporary access rules o Overly permissive access policies
• Review and optimize Disaster Recovery (DR) firewall configurations.
• Ensure firewall policies align with security and regulatory standards.
• Network Security Compliance Reviews
• Perform compliance assessments against security baselines and organizational standards.
• Validate network segmentation and access controls.
• Review and maintain network security architecture documentation.
• Network Documentation & Inventory Management
• Create and maintain network diagrams and security architecture documentation.
• Maintain accurate inventory of: o Firewalls o Routers o Switches o Load Balancers o Security Appliances o Cloud Network Components Access Management & Governance
• Perform periodic user access reviews.
• Validate privileged account access.
• Ensure least-privilege access principles are followed.
• Coordinate access certification and recertification activities.
• Security Hardening
• Review and implement network device hardening standards.
• Conduct periodic hardening audits for: o Firewalls o Routers o Switches o VPN Devices o Cloud Network Security Components
• Track and manage recurring hardening activities.
• Change & Incident Management
• Review and implement network security change requests.
• Participate in CAB (Change Advisory Board) activities.
• Handle emergency changes and ensure proper documentation.
• Perform post-change validation and risk assessment.
• Risk Assessment & Remediation
• Conduct risk assessments for insecure services and ports.
• Identify security gaps and recommend remediation measures.
• Track remediation activities until closure.
• Prepare risk treatment plans and compliance reports.
• Patch & Vulnerability Management
• Ensure network and security devices are maintained at N-1 software versions.
• Coordinate firmware and software upgrades.
• Track and remediate vulnerabilities identified through: o Vulnerability Assessments o Security Scans o Penetration Testing VAPT Management
• Coordinate Vulnerability Assessment and Penetration Testing (VAPT).
• Analyze findings and prioritize remediation.
• Validate closure of vulnerabilities.
• Prepare management reports and compliance evidence.
• DNS Security Review
• Review DNS architecture and configurations.
• Validate DNS security controls.
• Identify unauthorized or risky DNS configurations.
• Ensure DNS compliance with security standards.
• Asset Lifecycle Management
• Track AMC contracts and warranty status.
• Monitor: o Hardware End of Life (EOL) o Software End of Life (EOL) o End of Support (EOS)
• Drive technology refresh and remediation planning.
• Audit & Compliance Support
• Support internal and external audits.
• Provide compliance evidence and documentation.
• Assist with remediation of audit observations.
• Ensure adherence to standards such as: o RBI Guidelines o ISO 27001 o PCI-DSS o NIST o CIS Benchmarks o SOC 2 Required Technical Skills Networking
• TCP/IP
• Routing & Switching
• BGP
• OSPF
• VLANs
• NAT
• DNS
• DHCP
• VPN Technologies Security Technologies
• Next-Generation Firewalls
• IDS/IPS
• WAF
• DDoS Protection
• Proxy Security
• Network Segmentation Firewall Platforms Experience with one or more:
• Palo Alto Networks Firewalls
• Fortinet FortiGate
• Cisco Firepower/ASA
• Check Point Firewalls Cloud Security (Preferred)
• Amazon Web Services Networking
• Microsoft Azure Networking
• Oracle OCI Networking
• Security Groups
• NSGs
• Route Tables
• Cloud Firewalls Compliance & Governance
• Risk Assessment
• Security Audits
• Compliance Reviews
• Vulnerability Management
• Change Management
• Access Governance Automation (Preferred)
• Python
• PowerShell
• REST APIs
• Ansible
• CCNA / CCNP Security
• PCNSA / PCNSE
• NSE 4 / NSE 5
• CISSP
• CISM
• CEH
• ISO 27001 Lead Implementer/Auditor
• OCI/AWS/Azure Networking Certifications Key Performance Indicators (KPIs)
• Zero-hit rule reduction percentage
• Firewall compliance score
• Vulnerability remediation SLA compliance
• Patch compliance percentage
• Access review completion rate
• Audit observations closure rate
• EOL/EOS remediation compliance
• Security hardening compliance score
• Change success rate
• Risk remediation closure percentage Ideal Candidate Profile
• Strong understanding of network security architecture and compliance requirements.
• Experience managing enterprise firewalls and cloud network security controls.
• Ability to perform security assessments and drive remediation activities independently.
• Excellent troubleshooting, documentation, and stakeholder management skills.
• Experience supporting regulatory audits and security governance programs.
• Strong analytical mindset with a focus on risk reduction and continuous improvement.

Preferred qualifications and skills

• Terraform Preferred Certifications

Employment details

• Location: Pune [Maharashtra] [India]