Perimeter and Cloud Network Security Engineer

Suntory Global Spirits is a world leader in premium spirits with $5.5 billion in annual revenues and an ambition to become the World's Most Admired Premium Spirits Company. We have a strong vision and strategy, an incredible brand portfolio grounded in quality and craftsmanship, an unwavering commitment to sustainability and top talent across the organization. We are focused on driving value across key priorities including American whiskey, Japanese Spirits, Scotch, Tequila and Ready-to-Drink. Headquartered in New York City, Suntory Global Spirits is a subsidiary of Suntory Holdings, which is world renowned for delivering quality and excellence across a range of products and categories.

We are looking for people who bring something unique to Suntory Global Spirits - themselves. We value differences, and we appreciate what each of us can contribute. We inspire each other, and challenge ourselves to innovate, improve, advance new ideas and try new things. We create endless opportunities to Unleash Your Spirit every day in a culture that is charged, creative, challenging and fun.

We are seeking an experienced and highly skilled Perimeter and Cloud Network Security Engineer based out of Gurgaon, India, to design, implement, and manage perimeter and cloud-based firewall infrastructure across a hybrid IT environment. The ideal candidate will be responsible for safeguarding corporate assets by maintaining secure access controls, managing VPN infrastructure, and ensuring optimal performance and compliance of both on-premises and cloud-based firewall systems.

Mission of Role

The Perimeter and Cloud Network Security Engineer is a network security position that will be critical in safeguarding the organization's hybrid IT infrastructure by designing, implementing, and managing resilient perimeter and cloud-based network security controls. This role ensures secure connectivity and access by proactively defending against evolving cyber threats, maintaining high availability of network security services, and enabling business agility through secure cloud adoption.

Role Responsibilities

• Design, implement, configure, and maintain perimeter firewalls.
• Deploy and manage cloud virtual firewalls.
• Implement and manage cloud networking security controls such as VPC/Subnet design, route tables, NSGs, and NACLs.
• Maintain secure and reliable site-to-site and remote-access VPN services.
• Design, implement, configure, and maintain Network Access Control tools.
• Plan, execute, and maintain external network penetration testing and remediate identified network security gaps.
• Proactively monitor, analyze, and tune threat dashboards, firewall policies, and traffic flows to minimize risk and optimize performance.
• Ensure network security incidents and service requests are prioritized and addressed based on risk, impact, and urgency through ticketing tools such as ServiceNow and email communication.
• Conduct regular firewall rule audits, cleanup activities, and access reviews to enforce least-privilege access.
• Collaborate with IT infrastructure, OT engineering, OT security, and application teams to support secure network design in cloud-native environments.
• Respond to and investigate network security incidents, coordinating with SOC or incident response teams.
• Maintain up-to-date documentation for network security infrastructure and change management processes.
• Continuously review and improve network architecture to ensure security standards are integrated into new and existing infrastructure and application implementations.
• Perform any other network security tasks as assigned by the manager.

• Bachelor's degree in computer science, Information Security, or a related field.
• 5+ years of experience in network security engineering roles with a focus on perimeter and cloud firewalls, and VPN.
• Strong hands-on experience with enterprise-class firewall platforms (e.g., Palo Alto, Check Point, Cisco ASA) and cloud firewalls (e.g., Palo Alto VM-Series).
• Strong experience managing VPN technologies (e.g., GlobalProtect, Check Point VPN).
• 2+ years of experience managing cloud network security (Azure and GCP).
• Industry certifications in perimeter and cloud security/firewalls preferred.
• Excellent troubleshooting skills with a methodical approach to problem-solving.
• Strong communication skills with a proactive, dependable, and conscientious work ethic. Demonstrates initiative and takes ownership of tasks.
• Willingness to work flexible hours, including support coverage until 1 PM CST on regular workdays, with availability for on-call support during security incidents or critical risk remediation.