Senior Domain Manager Enterprise Network

ITPune Corporate Office - Mantri

Posted On

25 Jul 2025

End Date

25 Jul 2026

Required Experience

6 - 12 Years

BASIC SECTION

Job Level

GB04

Job Title

Senior Domain Manager Enterprise Network - IT, Infrastructure, Enterprise Network

Job Location

Country

India

State

MAHARASHTRA

Region

West

City

Pune

Location Name

Pune Corporate Office - Mantri

Tier

Tier 1

Skills

SKILL

SKILLS AS PER JD

Minimum Qualification

OTHERS

JOB DESCRIPTION

Job Purpose

We're looking for a Cloud Network & Security Engineer to manage and scale our internet-facing infrastructure, CDN performance, cloud network layers, and security edge controls, across platforms like Akamai, Cloudflare, AWS CloudFront, and cloud environments including AWS, OCI, and GCP.

Duties and Responsibilities

A- Minimum required Accountabilities for this role

• Manage and optimize Akamai CDN (NetStorage, multi-pathing, property rules, EdgeWorkers, cache policies).

• Maintain and operate DNS infrastructure with Akamai Edge DNS, Route 53, or Cloudflare DNS.

• Configure and troubleshoot Application Load Balancers (ALBs) across AWS and OCI.

• Administer Cloudflare and CloudFront configurations, including page rules, WAF settings, caching behavior, and certificate management.

• Configure firewall DNAT/SNAT rules, ingress/egress traffic flows, and IP-based access controls.

• Implement and maintain Web Application Firewalls (WAF) policies (Akamai Kona, Cloudflare WAF, AWS WAF).

• Secure ingress traffic to origin with mutual TLS, Origin Shield, and Akamai/Cloudflare Bot Management tools.

• Design and manage multi-cloud network topologies (VPCs, transit gateways, VPNs, interconnects) across AWS, GCP, and OCI.

• Manage and enforce network security posture across OCI, AWS, and GCP, including Security Groups, NACLs, routing tables, and Firewall-as-a-Service.

• Ensure full compliance with RBI Cybersecurity Framework, ISO 27001, and CERT-In directives.

B- Additional Accountabilities pertaining to the role

• Optimize multi-path traffic routing strategies using CDN geo-redundancy and cloud-native tools (like Route 53 latency routing, OCI DNS steering).

• Participate in internal performance benchmarking of CDNs, WAFs, and edge networks.

• Collaborate with the AI/ML team on projects involving traffic anomaly detection, auto-tuning CDN rules, and security pattern recognition.

• Support cloud DevOps and Infra teams in embedding network security into CI/CD pipelines.

• Maintain and optimize cost-efficient bandwidth usage and egress patterns using caching and edge compute strategies.

• Manage automation of CDN configuration and deployment using Terraform, Akamai Property Manager APIs, Cloudflare Workers, etc.

• Conduct regular CDN & cloud security posture assessments, performance audits, and configuration reviews.

• Work closely with SOC to correlate WAF logs, CDN logs, DNS query patterns, and detect malicious behaviors at the edge.

Key Decisions / Dimensions

• Require additional resource

Major Challenges

• Resource requirement

Required Qualifications and Experience

a) Qualifications

- Post Graduates with 6–12 years of relevant experience in enterprise network and security domains

b) Work Experience

- 6–12 years in enterprise network and security roles, preferably in regulated financial services or fintech environments.

• Deep hands-on expertise with:

o Akamai (NetStorage, WAF/Kona, Edge DNS, Property Manager, EdgeWorkers)

o Cloudflare (WAF, DNS, Bot Protection, Workers, Magic Transit)

o AWS CloudFront, Route 53, ALB, and Shield

o OCI Load Balancer, Networking, DNS, and FastConnect

o Firewall configuration (DNAT/SNAT, IP filtering, ACLs)

- Strong understanding of:

o HTTP/S protocols, CDN caching rules, TLS termination, edge performance

o Ingress/egress filtering, Zero Trust networking, DDoS protection techniques

o Multi-cloud networking patterns and IPSEC/GRE VPNs

o Infrastructure-as-Code (Terraform, CloudFormation, Akamai CLI/API)

Compliance & Security:

- Familiarity with RBI cybersecurity guidelines, ISO 27001 controls, and VAPT/VAS remediation workflows.

• Experience with SIEM log integration from CDNs, WAFs, DNS, and cloud firewalls.

Certifications (Preferred):

- Akamai ACA or ACE

• AWS Certified Advanced Networking / Security Specialty

• Cloudflare Zero Trust / Workers Specialist

• Cisco CCNP Security, Fortinet NSE, or equivalentc)