Network and Security Architect

Job Overview

We are urgently recruiting a Network Security Architect for Robert Bosch through Quess Corp Limited, based in Bengaluru, India. The ideal candidate will have a robust background in Core Networking (Layer 2/3) and Secure Site-to-Site Connectivity, undertaking responsibilities related to customer projects and products.

Key Responsibilities

• Design, represent and ensure security and compliance in OT network architecture.
• Create connectivity architecture designs and make strategic decisions on network implementations.
• Formulate reference architecture standards and establish design frameworks for various OT networks.
• Design, implement, and oversee secure, resilient, and scalable OT network architectures across industrial and manufacturing sectors.
• Develop high-level and low-level designs including network diagrams, IP addressing schemes, routing, firewall policies, and architecture standards.
• Evaluate OEM products to select solutions that meet both technical and business requirements.
• Lead adoption of Zero Trust principles in OT environments using technologies like ZPA, ZIA, and Cisco ZTA.
• Manage architecture for multi-site and multi-region network deployments.
• Define strategies for resiliency, redundancy, and failover mechanisms.
• Conduct architecture reviews with product, cybersecurity, and compliance stakeholders.
• Influence vendor choices, technology standards, and future technology roadmaps.
• Collaborate with cybersecurity teams on IDS/IPS, network monitoring, NAC, vulnerability management, and secure remote access solutions.
• Coordinate with enterprise IT teams to ensure seamless IT/OT convergence and security for remote access.

Required Skills and Qualifications

• Proficiency with Juniper devices preferred; Cisco device experience acceptable.
• Expertise in Layer 2 and Layer 3 networking: Switching, STP, VLANs, BGP, OSPF, VRF, and routing protocols.
• Hands-on experience with Cisco firewall solutions: ASA, FTD, FMC, including DMZ, context design, and segmentation.
• Experience implementing Zero Trust architectures including ZPA, ZIA, Cisco ZTA, multi-factor authentication, and privileged access management.
• Mandatory hands-on experience with AWS cloud networking: VPC, EC2, Transit Gateway, Direct Connect, and virtual firewall configuration.
• Familiarity with enterprise proxy solutions such as SOCKS5, Squid, HAProxy, NGINX, Zscaler, Blue Coat, or F5 for secure traffic and access management.
• Conceptual understanding of cybersecurity standards including IEC 62443, NIST CSF, ISO 27001, Purdue Model, and NERC CIP.
• Preferably certified with CCNP/CCIE, AWS Advanced Networking, and CISSP credentials.

Cloud Networking Expertise

• Design and configure AWS VPCs with public and private subnets, route tables, internet and NAT gateways.
• Launch and manage EC2 instances with configurations such as ENIs, Elastic IPs, IAM roles, and Auto Scaling.
• Deploy and manage virtual firewalls on EC2 like Cisco FTDv, Palo Alto VM-Series, or FortiGate.
• Implement virtual routing solutions on EC2 using software routers like Cisco CSR 1000V or VyOS with BGP peering.
• Implement hybrid connectivity using Direct Connect, Site-to-Site VPN, and Transit Gateway for multiple site deployments.
• Manage security groups, network ACLs, AWS Network Firewall, VPC Flow Logs, and CloudTrail for monitoring and compliance.

Experience and Leadership

• Minimum 9 years of experience in network engineering.
• Proven ownership of designing and implementing secure OT/IT integration models aligned with IEC 62443 standards.
• Ability to represent OT network architecture to customers, regulators, and senior management.
• Leadership skills to review designs, mentor engineering teams, and set technical directions.
• Strong communication skills capable of engaging executives, customers, and compliance groups.
• Certified CCNP as a baseline credential.

Additional Information

Applicants should have at least a B.Tech or B.E. degree in any specialization. This is an onsite position located in Bengaluru, India. Salary ranges between 700,000 to 1,700,000 INR annually. Candidates with AWS experience are required; experience with Azure or GCP is advantageous but not mandatory. Familiarity with cloud and enterprise proxies and cybersecurity standards at a conceptual awareness level is expected.