Network Security Engineer

Company Description  Kerala Vision Broadband Limited (KVBL) is a leading Internet Service Provider in India, promoted by the Cable Operator’s Association, a consortium of around 5000 cable operators in Kerala. The company focuses on delivering high-speed internet and internet-enabled services to households and institutions at affordable rates using state-of-the-art technology. KVBL operates the largest FTTH network in South India, offering extensive digital and broadband services.

Its network reaches both urban and rural areas, supported by a strong grassroots presence of dedicated cable operators. Kerala Vision is recognized as one of the most efficient and reliable multi-service providers in the country.

Role Description   The Security Architect is a cross-domain cybersecurity authority responsible for designing and positioning end-to-end security architectures spanning Network Security, End User Computing (EUC) Security, and Data Centre Security. The role serves both ISP clients (managing telco-grade security infrastructure) and MSI customers (enterprise security transformation). A strong commercial mindset and pre-sales ability are essential to position security as a value driver rather than a cost centre.

Key Responsibilities

• Architect holistic security solutions covering perimeter, internal segmentation, endpoint, cloud, and identity layers

• Design network security solutions: NGFW, IPS/IDS, SD-WAN security overlays, DDoS protection, and carrier-grade NAT/CGN security

• Architect End User Computing security — endpoint protection platforms (EPP), EDR/XDR, VDI security, email security, and web proxy/filtering

• Design Data Centre security: micro-segmentation, East-West firewall controls, WAF, privileged access management (PAM), and Zero Trust Architecture (ZTA)

• Position and architect SASE (Secure Access Service Edge) and SSE solutions — Zscaler, Prisma Access, Cato Networks

• Develop SOC design frameworks, SIEM architecture (Splunk, Microsoft Sentinel, IBM QRadar), and SOAR playbooks

• Lead security assessments, gap analyses, and compliance mapping (ISO 27001, NIST, PCI-DSS, GDPR, NCA ECC in KSA/UAE)

• Respond to security-focused RFPs, build BoMs, and lead technical presentations to CISO-level stakeholders

• Maintain strong OEM relationships with Palo Alto Networks, Fortinet, Check Point, Cisco, Crowd Strike, Microsoft, Zscaler, and Milestone PSIM/VMS

• Provide guidance on ICCC (Integrated Command & Control Centre) security integration — PSIM, video surveillance, access control

◆ Technical Expertise — Hands-On Requirements

• Palo Alto Networks: PAN-OS, Panorama, Prisma Access, Prisma Cloud — hands-on deployment and policy management

• Fortinet:
Forti Gate, Forti Manager, Forti Analyzer, Forti Client EMS — advanced routing security and SD-WAN integration

• Check Point:
Smart Console, CPUSE, Cloud Guard — policy administration and HA deployment

• Microsoft 365 Defender stack:
Defender for Endpoint, Identity, Cloud Apps, and Sentinel SIEM

• Network segmentation: VLANs, ACLs, micro-segmentation with VMware NSX-T or Illumio

• Identity and access management:
Active Directory, Azure AD, Okta, Cyber Ark PAM

• Vulnerability management tools:
Tenable Nessus, Qualys, Rapid7 — enterprise scanning and reporting

• ICCC / Physical Security integration:
Milestone XProtect, Genetec, Lenel, Honeywell Pro-Watch — understanding of video analytics and access control

• Cloud security posture management (CSPM) on AWS, Azure, and GCP

Educational Qualifications

• Mandatory:
B.E. /

B.Tech in Electronics & Communication, Computer Science, Information Technology, or Telecommunications

• Equivalent:
BCA / MCA / M.Sc. (IT/Networks) — considered with strong industry experience

• Preferred:
Postgraduate qualifications (M.Tech / MBA in Technology Management) are a distinct advantage