Job description

Job Purpose	1. JOB PURPOSE We are seeking a skilled Network Security Manager (GB05) with strong hands-on expertise in Oracle Cloud Infrastructure (OCI) networking and security, including Palo Alto SASE, OCI-native security controls (NSGs, Security Lists), and automation-driven rule governance. The role is responsible for end-to-end network security operations, policy automation, and compliance within OCI environments, ensuring secure, scalable, and audit-ready cloud infrastructure. The candidate will also play a key role in managing security audits, compliance requirements, and ongoing security posture enhancements.
Duties and Responsibilities	PRINCIPAL ACCOUNTABILITIES A. Minimum Required Accountabilities for this Role (Mandatory) OCI Network & Security Operations • Manage and operate OCI networking components: o VCNs, Subnets, Route Tables o NSGs (Network Security Groups), Security Lists o Internet Gateway, NAT Gateway, Service Gateway o DRG (Dynamic Routing Gateway), Local & Remote Peering • Ensure secure and optimized traffic flow between OCI workloads, on prem systems, and external networks. Firewall & SASE Security Management • Manage and operate Palo Alto (VM-Series / SASE) within OCI and hybrid environments. • Configure and maintain: o Security policies and rule bases o NAT (SNAT/DNAT) o VPNs (IPSec/SSL) o Threat prevention profiles (IPS, Anti-malware, URL filtering) • Ensure consistent enforcement of security policies across OCI workloads. Security Policy Governance & Automation • Implement and manage firewall rule lifecycle processes: o Rule creation, review, optimization, and decommissioning • Drive automation of rule reviews, recertification, and policy validation using scripts/API-based solutions. • Maintain standardization across NSGs, Security Lists, and firewall rules. Ingress/Egress Traffic Security • Define and enforce secure ingress and egress controls for OCI applications. • Implement segmentation strategies for east-west and north-south traffic flows. • Ensure secure exposure of applications via load balancers, gateways, and SASE. Monitoring & Incident Management • Monitor firewall logs, OCI flow logs, and threat alerts. • Handle 24×7 incident response, troubleshooting, and escalation. • Perform root cause analysis (RCA) and implement proactive security improvements. Audit & Compliance Management • Manage network security audits (internal/external/regulatory) specific to OCI environments. • Ensure compliance with organization policies and regulatory frameworks. • Conduct: o Firewall rule reviews and recertification o NSG/security configuration audits o Access and segmentation validation • Track and close audit observations with proper documentation. Documentation & Collaboration • Maintain updated HLD, LLD, SOPs, runbooks, and security policies. • Collaborate with cloud, DevOps, security, and application teams. ________________________________________ B. Additional Accountabilities (Advanced / Growth-Oriented) Security Architecture & Optimization • Design and optimize secure OCI network architectures with segmentation and zero-trust principles. • Define best practices for VCN design, peering, DRG-based architectures, and load balancing. Automation & DevSecOps • Implement Infrastructure as Code (IaC) using Terraform/OCI Resource Manager. • Automate firewall rules, NSG updates, compliance checks, and configuration drift detection. • Integrate network security into CI/CD pipelines. Security Posture Enhancement • Strengthen environment security using: o Threat intelligence o DDoS protection strategies\|o Continuous monitoring and anomaly detection • Integrate with SIEM/SOC tools for centralized visibility. Leadership & Governance • Act as technical escalation point for OCI security issues. • Guide team members and vendors on best practices. • Define governance models for OCI network security operations. ________________________________________
Key Decisions / Dimensions	5. DECISIONS • Approve firewall rule changes, NSG policies, and security configurations. • Decide segmentation strategies and ingress/egress controls. • Lead decisions during security incidents and audit escalations. • Recommend improvements in security architecture and tooling.\|DIMENSIONS Financial Dimensions • Management of OCI networking/security costs and Palo Alto licensing Other Dimensions • Total Team Size: ___ • Direct Reports: ___ • Indirect Reports: ___ • OCI Environments/VCNs Managed: ___ • Applications Hosted on OCI: ___
Major Challenges	4. MAJOR CHALLENGES • Maintaining consistent security posture across dynamic OCI environments. • Managing complex firewall and NSG rule sets without over-permissive access. • Ensuring continuous compliance with audit and regulatory expectations. • Handling high-volume security alerts and incident response. • Balancing agility and speed of deployment with strict security controls.
Required Qualifications and Experience	8. SKILLS AND KNOWLEDGE a) Educational Qualifications • Bachelor’s / Master’s in Computer Science, IT, or related field. b) Work Experience & Certifications Must Have • 5–8+ years in network security with cloud exposure, particularly OCI. • Hands-on experience with: o OCI Networking (VCN, DRG, NSG, Peering) o Palo Alto Firewalls / SASE • Strong knowledge of firewall policy management, NAT, VPNs, and segmentation. • Experience in automating firewall rule review and compliance processes. • Proven experience in handling security audits and compliance requirements. Good to Have • Certifications: OCI Architect/Professional, PCNSE, CCNP Security. • Experience with Terraform, Python, Ansible for automation. • Exposure to SIEM/SOC integrations and cloud security monitoring. Soft Skills • Strong ownership, audit handling capability, and stakeholder management. • Excellent troubleshooting and analytical skills. • Ability to work in a 24×7 operational environment.

Someone shared one job with you. ASAI keeps finding the rest.

Scored, not searched. Every role ranked against your actual profile.

Alerts as often as hourly. Reach new roles while the pile is still small.

Skill gaps, spelled out. See exactly which requirements you don't meet yet.

Verified jobs, only. Say no to ghost jobs. Your time deserves respect.

Someone shared one job with you. ASAI keeps finding the rest.

Scored, not searched. Every role ranked against your actual profile.

Alerts as often as hourly. Reach new roles while the pile is still small.

Skill gaps, spelled out. See exactly which requirements you don't meet yet.

Verified jobs, only. Say no to ghost jobs. Your time deserves respect.

Job description

Job Purpose	1. JOB PURPOSE We are seeking a skilled Network Security Manager (GB05) with strong hands-on expertise in Oracle Cloud Infrastructure (OCI) networking and security, including Palo Alto SASE, OCI-native security controls (NSGs, Security Lists), and automation-driven rule governance. The role is responsible for end-to-end network security operations, policy automation, and compliance within OCI environments, ensuring secure, scalable, and audit-ready cloud infrastructure. The candidate will also play a key role in managing security audits, compliance requirements, and ongoing security posture enhancements.
Duties and Responsibilities	PRINCIPAL ACCOUNTABILITIES A. Minimum Required Accountabilities for this Role (Mandatory) OCI Network & Security Operations • Manage and operate OCI networking components: o VCNs, Subnets, Route Tables o NSGs (Network Security Groups), Security Lists o Internet Gateway, NAT Gateway, Service Gateway o DRG (Dynamic Routing Gateway), Local & Remote Peering • Ensure secure and optimized traffic flow between OCI workloads, on prem systems, and external networks. Firewall & SASE Security Management • Manage and operate Palo Alto (VM-Series / SASE) within OCI and hybrid environments. • Configure and maintain: o Security policies and rule bases o NAT (SNAT/DNAT) o VPNs (IPSec/SSL) o Threat prevention profiles (IPS, Anti-malware, URL filtering) • Ensure consistent enforcement of security policies across OCI workloads. Security Policy Governance & Automation • Implement and manage firewall rule lifecycle processes: o Rule creation, review, optimization, and decommissioning • Drive automation of rule reviews, recertification, and policy validation using scripts/API-based solutions. • Maintain standardization across NSGs, Security Lists, and firewall rules. Ingress/Egress Traffic Security • Define and enforce secure ingress and egress controls for OCI applications. • Implement segmentation strategies for east-west and north-south traffic flows. • Ensure secure exposure of applications via load balancers, gateways, and SASE. Monitoring & Incident Management • Monitor firewall logs, OCI flow logs, and threat alerts. • Handle 24×7 incident response, troubleshooting, and escalation. • Perform root cause analysis (RCA) and implement proactive security improvements. Audit & Compliance Management • Manage network security audits (internal/external/regulatory) specific to OCI environments. • Ensure compliance with organization policies and regulatory frameworks. • Conduct: o Firewall rule reviews and recertification o NSG/security configuration audits o Access and segmentation validation • Track and close audit observations with proper documentation. Documentation & Collaboration • Maintain updated HLD, LLD, SOPs, runbooks, and security policies. • Collaborate with cloud, DevOps, security, and application teams. ________________________________________ B. Additional Accountabilities (Advanced / Growth-Oriented) Security Architecture & Optimization • Design and optimize secure OCI network architectures with segmentation and zero-trust principles. • Define best practices for VCN design, peering, DRG-based architectures, and load balancing. Automation & DevSecOps • Implement Infrastructure as Code (IaC) using Terraform/OCI Resource Manager. • Automate firewall rules, NSG updates, compliance checks, and configuration drift detection. • Integrate network security into CI/CD pipelines. Security Posture Enhancement • Strengthen environment security using: o Threat intelligence o DDoS protection strategies\|o Continuous monitoring and anomaly detection • Integrate with SIEM/SOC tools for centralized visibility. Leadership & Governance • Act as technical escalation point for OCI security issues. • Guide team members and vendors on best practices. • Define governance models for OCI network security operations. ________________________________________
Key Decisions / Dimensions	5. DECISIONS • Approve firewall rule changes, NSG policies, and security configurations. • Decide segmentation strategies and ingress/egress controls. • Lead decisions during security incidents and audit escalations. • Recommend improvements in security architecture and tooling.\|DIMENSIONS Financial Dimensions • Management of OCI networking/security costs and Palo Alto licensing Other Dimensions • Total Team Size: ___ • Direct Reports: ___ • Indirect Reports: ___ • OCI Environments/VCNs Managed: ___ • Applications Hosted on OCI: ___
Major Challenges	4. MAJOR CHALLENGES • Maintaining consistent security posture across dynamic OCI environments. • Managing complex firewall and NSG rule sets without over-permissive access. • Ensuring continuous compliance with audit and regulatory expectations. • Handling high-volume security alerts and incident response. • Balancing agility and speed of deployment with strict security controls.
Required Qualifications and Experience	8. SKILLS AND KNOWLEDGE a) Educational Qualifications • Bachelor’s / Master’s in Computer Science, IT, or related field. b) Work Experience & Certifications Must Have • 5–8+ years in network security with cloud exposure, particularly OCI. • Hands-on experience with: o OCI Networking (VCN, DRG, NSG, Peering) o Palo Alto Firewalls / SASE • Strong knowledge of firewall policy management, NAT, VPNs, and segmentation. • Experience in automating firewall rule review and compliance processes. • Proven experience in handling security audits and compliance requirements. Good to Have • Certifications: OCI Architect/Professional, PCNSE, CCNP Security. • Experience with Terraform, Python, Ansible for automation. • Exposure to SIEM/SOC integrations and cloud security monitoring. Soft Skills • Strong ownership, audit handling capability, and stakeholder management. • Excellent troubleshooting and analytical skills. • Ability to work in a 24×7 operational environment.