Senior IT Security Engineer

Job Summary:

The Senior IT Security & Infra Engineer will be part of the ESD Divisional IT Infrastructure and Security team, based in Chennai, India. The role will act as a senior technical specialist for network security and infrastructure operations, with a strong focus on firewalls, switches, wireless platforms, vulnerability remediation, incident response and compliance with ASSA ABLOY Group IT standards.

The successful candidate will have 10+ years of relevant IT infrastructure and security experience, including strong hands-on knowledge of enterprise network technologies such as Cisco switching and wireless, Palo Alto and Fortinet firewalls. The role requires a self-driven, proactive and fast-learning individual who can work independently, support global teams, and take ownership of operational issues, project deliverables and security improvements. The candidate will closely with IT Transformation Manager and other team members across the division.

Key Responsibilities:

The role will provide senior-level operational support and technical ownership across network security platforms, enterprise network infrastructure and security improvement activities. Key responsibilities include:

• Manage, support and troubleshoot enterprise firewalls, switches and wireless infrastructure, including configuration, lifecycle support, patching and compliance with group standards.

• Support network security operations, including firewall policy management, vulnerability remediation, infrastructure hardening and secure network connectivity.

• Investigate and support security incidents affecting network infrastructure, working closely with Group IT, SOC teams and local IT teams.

• Provide 2nd and 3rd line troubleshooting for infrastructure and network security issues, including root-cause analysis and follow-up remediation.

• Support projects, M&A integrations, audits and security improvement initiatives across divisional and global environments.

• Provide clear guidance, escalation support and technical direction to local IT teams and business stakeholders.

Second/Third line support for (divisional) IT infra solutions

Security Incident Management

• Drive routine follow-up actions for security-related improvements, with a primary focus on network devices and infrastructure security.

• Support local IT teams in deploying, maintaining and troubleshooting network hardware, including switches, firewalls and wireless infrastructure.

• Support local IT teams with routine patching, lifecycle maintenance and remediation activities for network hardware.

• Support local IT teams to ensure network hardware is managed according to group standards.

• Engage with group IT SOC for any critical incidents that may arise around the networking area.

• Act as a key contributor in M&A projects, supporting remote deployment and integration of network infrastructure across Enterprise IT, OT and Product IT areas.

Projects & Audits

Take part in, and actively contribute to, projects related to security, network infrastructure and IT operations, both within the Division and across ASSA ABLOY Group.

Support audits and security assessments within the existing organisation and during integration of newly acquired companies.

Contribution responsibilities / working areas

• IT Security Operations support

• Help drive activities to establish & maintain the IT SecOps function.

• Focus areas such as vulnerability scanning, and actions related to this.

• Microsoft infrastructure and security support

• Familiarity with Microsoft infrastructure and security platforms, including Active Directory, Microsoft 365, endpoint management and collaboration platforms, is desirable.

• Provide support where required, while maintaining the primary focus on network security and infrastructure operations.

• Familiar with industry standard tools such as rapid7, Bigfix, CyberInt and also BitSight.

• Network Infrastructure support

• (W)LAN setups

• Cloud integrations

• Firewalls, switches and wireless infrastructure

Responsibilities and authorities

• Take ownership of assigned tasks and project work, acting in a self-driven and accountable manner.

• Keep the line manager informed of progress, risks and actions taken to secure the environment and deliver assigned infrastructure responsibilities.

• Represent ESD for some HQ (ASSA ABLOY Group) needs / projects.

• Work based on global IT policies.

Key competences

• Strong experience and knowledge of Cisco switching and wireless technologies, as well as Palo Alto and Fortinet firewall platforms.

• Documented knowledge and experience in IT security, with emphasis on security incident management across an enterprise IT infrastructure landscape.

• Experience with Microsoft infrastructure and security, ethical hacking, infrastructure hardening and CIS controls is desirable.

• Experience with platforms outside the Microsoft technology stack is desirable.

• Relevant certifications such as CISSP, CEH, CCNP Security, PCNSE or Fortinet NSE are desirable, as are certifications in data forensics, perimeter security and Microsoft infrastructure/security.

• Experience analysing and troubleshooting 2nd and 3rd line infrastructure issues.

• Good knowledge of security concepts, controls and operational practices.

• Knowledge of Windows 11 and Windows Server 2016/2019 or later versions.

• Knowledge of VoIP and cloud telephony is desirable.

• Experience with scripting, such as PowerShell or Python, and automation is desirable.

• Strong English communication skills, both written and verbal.

Must-have requirements

• 10+ years of IT infrastructure, network or security experience.

• 5+ years of hands-on enterprise network security operations experience.

• Strong Cisco switching and wireless experience.

• Strong Palo Alto and/or Fortinet firewall experience.

• Experience with security incident management, vulnerability remediation and infrastructure hardening.

• Ability to work independently with global stakeholders and drive issues to closure.

Desirable requirements

• CISSP, CEH, CCNP Security, PCNSE or Fortinet NSE certification.

• Microsoft infrastructure and security experience.

• PowerShell or Python scripting and automation experience.

• Experience with M&A integrations, divestments, site migrations or infrastructure projects.

• OT or manufacturing network exposure.

Education and/or Experience

• Bachelor’s or Master’s degree in Computer Science, Information Systems, Cyber Security, Engineering, or equivalent relevant experience.

• 10+ years of total IT infrastructure, network or security experience.

• 5+ years of hands-on experience in enterprise network security operations.

• Strong experience managing and troubleshooting firewalls, switches and wireless infrastructure in a global enterprise environment.

• Practical experience with Cisco switching/wireless, Palo Alto and/or Fortinet technologies.

• Experience supporting 2nd and 3rd line infrastructure incidents, including root-cause analysis and remediation.

• Experience with vulnerability management, patching, hardening and network security compliance.

• Experience working with global teams, central IT functions and local IT support teams.

• Experience in infrastructure projects, acquisitions, divestments or site integrations is desirable.

• Strong personal drive, ownership mindset and ability to quickly learn new technologies and operating models.

Language Skills

• Ability to effectively communicate in the English language, both verbally and in writing.

• Ability to read and interpret technical journals, specifications, international technical standards, etc.

Computer Skills

• Proficient in MS Office applications, such as Word, Excel, PowerPoint, etc.

• Proficient with Palo Alto, Cisco and Fortinet network technologies, especially firewalls, switches and wireless infrastructure.

• Familiar with operating systems, such as Windows, etc.

Work Environment

The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Employees work primarily in an office environment, within a well-ventilated area, and are exposed to moderate noise levels.

Work Requirements

• Compliance to all relevant ASSA ABLOY policies and procedures related to Quality, Security, Safety, Business Continuity, and Environmental systems.

• Travel and fieldwork, including international travel may be required. Therefore, employees must possess, or be able to acquire, a valid passport.

• Must be legally eligible to work in the country in which you are hired.

Behavioural expectations

Personal attributes to include:

• Self-driven and able to work with limited supervision

• Fast learner with the ability to quickly understand new technologies, standards and operating models

• Structured, proactive and accountable in task follow-up

• Comfortable working with global teams across time zones

• Strong ownership mindset and ability to drive issues to closure

Success measures

Success in this role will be measured by the engineer’s ability to maintain secure and compliant network infrastructure, respond effectively to security incidents, support vulnerability remediation, enable successful project delivery, and provide clear guidance to local and global IT teams.

• Network security incidents are handled quickly and effectively

• Firewall, switch and wireless platforms remain compliant with group standards

• Vulnerabilities and patching actions are tracked and completed

• Local IT teams receive clear guidance and support

• M&A integrations are supported with minimal disruption

We are the ASSA ABLOY Group Our people have made us the global leader in access solutions. In return, we open doors for them wherever they go. With nearly 63,000 colleagues in more than 70 different countries, we help billions of people experience a more open world. Our innovations make all sorts of spaces – physical and virtual – safer, more secure, and easier to access.

As an employer, we value results – not titles, or backgrounds. We empower our people to build their career around their aspirations and our ambitions – supporting them with regular feedback, training, and development opportunities. Our colleagues think broadly about where they can make the most impact, and we encourage them to grow their role locally, regionally, or even internationally.

As we welcome new people on board, it’s important to us to have diverse, inclusive teams, and we value different perspectives and experiences.