Sr. Network Security Engineer

About the role

We are looking for a Senior Network Security Engineer to join Bosch’s Global Software Technologies team in Bangalore. The role focuses on designing, implementing and securing both IT and OT networks for customer projects, with a strong emphasis on core Layer‑2/3 routing and zero‑trust site‑to‑site connectivity.

Key responsibilities

• Design and configure Layer‑2/3 networks including VLANs, STP, BGP, OSPF and VRF on Cisco switches and routers.
• Develop and implement firewall architectures using Cisco ASA/FTD/FMC, including DMZ and segmentation strategies.
• Replace traditional VPN solutions with Zero‑Trust architectures (ZPA, ZIA, Cisco ZTA) and manage MFA and privileged access controls.
• Plan and execute AWS cloud networking – VPC, subnets, Transit Gateway, Direct Connect, security groups and virtual firewalls.
• Ensure designs comply with IEC 62443, NIST CSF, ISO 27001 and the Purdue model.
• Collaborate with cross‑functional teams to deliver secure network solutions for customer products and projects.

Required profile

• Hands‑on experience designing and operating Layer‑2/3 networks in production environments.
• Proven expertise with Cisco firewall platforms and Zero‑Trust solutions.
• Strong practical knowledge of AWS networking services.
• Familiarity with industrial security standards (IEC 62443, NIST CSF, ISO 27001, Purdue).
• Relevant certifications such as CCNP/CCIE, AWS Advanced Networking or CISSP are a plus.

Required skills

• VLAN, STP, BGP, OSPF, VRF
• Cisco ASA, Cisco FTD, Cisco FMC
• DMZ design, network segmentation
• Zero‑Trust (ZPA, ZIA, Cisco ZTA), MFA, privileged access management
• AWS VPC, EC2, Transit Gateway, Direct Connect, security groups, virtual firewalls
• Virtual routers (Cisco CSR 1000V, VyOS) and firewalls (Palo Alto VM‑Series, FortiGate)
• Awareness of IEC 62443, NIST CSF, ISO 27001, Purdue model