AVP - Network Security Engineer.

Corporate Title: Assistant Vice President

Location: Bengaluru

Job Profile – Senior Network Security Engineer

Position Details

The role is for the position of Senior Network Security Engineer within ASO TIS based out of Bangalore. The successful candidate will be part of a growing and dynamic regional team responsible for design, engineering, and operational security of enterprise network infrastructure across APAC.

This role spans end-to-end network security lifecycle, including architecture, implementation, operations (BAU), and strategic transformation initiatives, ensuring confidentiality, integrity, and availability of the organization's systems and data.

The position requires strong expertise in enterprise network security, regulatory compliance (banking environment), hybrid cloud architecture, and large-scale infrastructure security transformations.

Roles and Responsibilities

This role requires strong real-world experience in Network Security Products, implementation, and troubleshooting.

• Network Security Operations (BAU + L3 Escalation)
• Provide L3/L4 support for critical network security infrastructure:
• Firewalls (FortiGate, Check Point, Juniper SRX)
• Load Balancers / WAF (F5 LTM/GTM/ASM/WAAP)
• VPNs, Proxy, DNS security
• Secure remote access (VPN, Zero Trust / ZTNA concepts)
• DDoS mitigation and WAAP platforms
• Next-Gen Firewalls & Segmentation policies
• Troubleshoot complex issues including performance, MTU/MSS mismatch, asymmetric routing, and application connectivity.
• Ensure high availability and resilience of security infrastructure across primary and DR sites.
• Demonstrate flexibility to support weekend operations and participate in on-call rotations to ensure high availability and stability of critical network services.

Technical Capabilities

• Strong expertise in enterprise networking protocols: Good to have skills sets - BGP, OSPF, MPLS, VLANs, TCP/IP.
• Hands-on experience in securing Data Center, Internet, and Cloud network environments
• Expertise with Firewalls: FortiGate, Check Point, Juniper SRX
• Experience with DDoS protection, WAF/WAAP platforms (Akamai, Cloudflare, F5 ASM/WAAP)
• Strong knowledge of VPN technologies (IPsec, SSL VPN) and secure remote access
• Experience with F5 Load Balancers (LTM/GTM), traffic management, and GSLB
• Strong understanding of DNS, DHCP, IPAM (Infoblox / BlueCat preferred)
• Experience in cloud networking (AWS, Azure, GCP) including hybrid connectivity and security controls
• Familiarity with micro-segmentation and Zero Trust concepts
• Strong troubleshooting capability across Layer 3–7 network and security domains
• Experience with network monitoring and observability tools (SolarWinds, Netscout, Wireshark, Dynatrace)
• Knowledge of network automation tools (Python, Ansible, Terraform)
• Understanding and good to have knowledge on data center architectures (Spine-Leaf, ACI)
• Exposure to regulatory and security frameworks within enterprise/banking environments

Job Requirements

• 10+ years of experience in networking/security
• Strong experience in enterprise or banking environments
• Hands-on delivery of network security transformation initiatives
• Certifications:
• CCIE / CCNP (preferred)
• Fortinet / Check Point certifications
• AWS Networking/Security certifications (preferred)

Educational Requirements

• Bachelor’s degree in Computer Science / IT / Network Engineering (mandatory)

Equal Opportunity Employer

The MUFG Group is committed to providing equal employment opportunities to all applicants and employees and does not discriminate on the basis of race, colour, national origin, physical appearance, religion, gender expression, gender identity, sex, age, ancestry, marital status, disability, medical condition, sexual orientation, genetic information, or any other protected status of an individual or that individual's associates or relatives, or any other classification protected by the applicable laws.

Mitsubishi UFJ Financial Group (MUFG) is an equal opportunity employer. We view our employees as our key assets as they are fundamental to our long-term growth and success. MUFG is committed to hiring based on merit and organsational fit, regardless of race, religion or gender.