Network Security Engineer

We are looking for a Network Security Engineer to manage and secure the IT and network infrastructure. The role is critical in ensuring compliance with ISO/IEC 27001, meeting client security requirements, and supporting audits, security reviews, and due diligence questionnaires. Key Responsibilities • Design, implement, and manage secure network environments for internal teams and client-facing delivery operations. • Manage Windows Server environments, including Active Directory, Group Policy, and file-sharing services. • Configure and maintain networking hardware such as routers, switches, firewalls, and wireless access points. • Implement and maintain security protocols, including firewalls, patch management, and intrusion detection systems. • Own network security controls aligned with ISO 27001 and client contractual requirements. • Manage firewalls, VPNs, secure remote access, and network segmentation for delivery teams. • Ensure secure onboarding/offboarding of employees, vendors, and project-based access. • Monitor network traffic, logs, and alerts; investigate and respond to security incidents. • Support client security audits, questionnaires, and compliance reviews by providing network-related evidence. • Work closely with Compliance, IT Admin, and Delivery teams to ensure audit readiness at all times. • Implement and enforce access control, least privilege, and secure authentication practices. • Maintain and update network diagrams, SOPs, access logs, and configuration baselines. • Support business continuity, backup connectivity, and disaster recovery planning. ISO 27001 & Client Compliance Responsibilities • Maintain network controls mapped to the Statement of Applicability (SoA). • Assist in internal audits, external audits, and surveillance audits. • Track and remediate non-conformities and security observations. • Support risk assessments, vendor risk reviews, and asset management activities. • Ensure change management processes are followed and documented. Required Skills & Qualifications • Bachelor’s degree in IT, Computer Science, or Information Security. • Expertise in Windows Server (2016/2019/2022), including Active Directory and Group Policy management. • Strong understanding of networking fundamentals (TCP/IP, routing, switching, VLANs). • Hands-on experience with firewalls (Seqrite and/or Sophos) • Experience with VPNs, secure remote access, and endpoint/network security tools. • Familiarity with ISO/IEC 27001 and compliance-driven environments. • Experience handling client security queries and audit evidence. • Knowledge of SIEM, logging, and monitoring tools. • Knowledge of virtualization platforms like VMware, Hyper-V, or KVM is a plus. Preferred Certifications • ISO/IEC 27001 Lead Implementer or Internal Auditor • CCNA / CCNP Security • CISSP / CISM • CompTIA Security+ Soft Skills • Strong documentation and process orientation • Client-facing communication skills • Ability to balance security with business delivery needs • High ownership and accountability mindset