Network & Security Engineer

Job Description:

Position Overview

We are seeking a highly skilled and motivated Network & Security Engineer with 5+ years of experience in enterprise environments. The ideal candidate will have deep expertise in network operations, security administration, and incident response, and will be responsible for maintaining, securing, and optimizing our global enterprise network infrastructure.
This role requires strong hands-on technical knowledge of firewalls, VPNs, IDS/IPS, SIEM, endpoint security, and cloud networking, along with the ability to design, implement, and manage security controls aligned with industry best practices and compliance requirements.

Network Operations & Administration:
- Manage, monitor, and optimize enterprise LAN/WAN, firewalls, VPNs, load balancers, and routers/switches.
- Oversee daily network operations, troubleshooting, and performance tuning.
- Implement and maintain network segmentation, redundancy, and high availability. Security Operations:
- Configure and manage firewalls, IDS/IPS, endpoint security, and threat intelligence tools.
- Monitor security logs, SIEM alerts, and network traffic for anomalies and potential threats.
- Lead incident response for security breaches, including root cause analysis and remediation. Access & Identity Management:
- Administer user access controls, VPN authentication, and privileged account security.
- Collaborate with IAM/IDP solutions (e.g., Okta, Azure AD) for secure access. Cloud & Hybrid Security:
- Secure cloud workloads in Azure/AWS with network and security best practices.
- Implement security controls across hybrid and multi-cloud environments. Compliance & Governance:
- Ensure security controls align with ISO 27001, NIST, CIS, GDPR, and enterprise policies.
- Maintain documentation of network diagrams, SOPs, and security standards. Collaboration:
- Work closely with IT, SOC, and application teams to integrate security into all operations.
- Assist in evaluating new technologies, tools, and processes for network and security enhancements.

Strong problem-solving and analytical thinking. Excellent communication and documentation skills. Ability to work under pressure and handle incidents effectively. Collaborative mindset with cross-functional teams.

Networking: TCP/IP, DNS, DHCP, BGP, OSPF, MPLS, VLANs, QoS Security: Firewalls (Palo Alto, Fortinet, SonicWall, Cisco ASA), IDS/IPS, WAF, DLP SIEM & Monitoring: Splunk, Falcon LogScale, QRadar, Sentinel, Darktrace Endpoint & Identity: CrowdStrike, Okta, CyberArk, Netskope Cloud Security: AWS VPC, Azure NSGs, IAM policies, VPN gateways Scripting/Automation: PowerShell, Python, Ansible (preferred) Strong knowledge of MITRE ATT&CK, NIST CSF, and Zero Trust principles.

Education: Bachelor’s degree in Computer Science, Information Technology, or related field.

Experience: 5+ years in enterprise network operations and security engineering roles.

Certifications (Preferred):
- Networking: CCNP, CCNA, CompTIA Network+
- Security: CISSP, CISM, CISA, CEH, or equivalent
- Cloud Security: Azure Security Engineer Associate, AWS Security Specialty

At Nextracker, we are leading in the energy transition, providing the most comprehensive portfolio of intelligent solar tracker and software solutions for solar power plants, as well as strategic services to capture the full value of solar power plants for our customers. Our talented worldwide teams are transforming PV plant performance every day with smart technology, data monitoring and analysis services.

For us at Nextracker, sustainability is not just a word. It's a core part of our business, values and our operations. Our sustainability efforts are based on five cornerstones: People, Community, Environment, Innovation, and Integrity. We are creative, collaborative and passionate problem-solvers from diverse backgrounds, driven by our shared mission to provide smart solar and software solutions for our customers and to mitigate climate change for future generations.