Infrastructure Security Design Engineer

Who we are

NTT DATA is one of the world's largest global security service providers, partnering with some of the most recognized security technology brands. We're looking for passionate, curious, and motivated individuals to join our team.

What you’ll be doing

• Design secure network architectures for enterprise and multi-cloud environments.
• Develop security zone models, segmentation strategies, and DMZ architectures.
• Produce high/low-level design documentation and contribute to reference architectures.
• Design and configure firewalls, IPS/IDS, proxies, and secure remote access solutions.
• Implement segmentation, VPN, and zero trust network access strategies.
• Perform network security assessments and optimize security policies.
• Deploy and configure SIEM, EDR, DLP, NAC, and monitoring solutions.
• Integrate security tools into infrastructure and operational workflows.
• Create implementation guides, runbooks, and support technology pilots.
• Develop CIS-aligned hardening standards and secure baseline configurations.
• Conduct configuration assessments, remediation planning, and patch management.
• Validate security controls through technical testing and compliance checks.
• Design endpoint protection strategies (EDR, AV, application control).
• Develop secure server architectures for Windows, Linux, and virtualized environments.
• Implement privileged access workstations, bastion hosts, and secure admin models.
• Produce architecture documents, diagrams, and security zone mappings.
• Develop infrastructure security standards, guidelines, and design repositories.
• Document design decisions and support architecture review processes.

What you'll bring along

• Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, or related field
• Minimum 5–10 years of experience in cybersecurity or IT security roles.
• Strong knowledge of network security architectures and secure design principles
• Solid understanding of firewall technologies (Palo Alto, Cisco, Fortinet, Check Point)
• Experience with IPS/IDS systems, web application firewalls, and email security gateways
• Knowledge of VPN technologies, NAC solutions, and secure remote access
• Understanding of security monitoring tools including SIEM, EDR, and SOAR platforms
• Network protocols: TCP/IP, routing, switching, VLANs, VXLANs, SD-WAN
• Security technologies: Next-gen firewalls, IPS/IDS, proxies, DLP, NAC
• Virtualization: VMware, Hyper-V, virtual security appliances
• Operating systems: Windows Server, Linux distributions, hardening practices
• Cloud platforms: Basic understanding of AWS, Azure, GCP networking and security
• Understanding of security frameworks (NIST CSF, ISO 27001, CIS Controls)
• Knowledge of network security best practices and industry standards
• Familiarity with zero trust architecture principles
• Understanding of secure SDLC and DevSecOps concepts
• Awareness of regulatory requirements affecting infrastructure security
• Clear technical communication and documentation abilities
• Collaboration skills for working with infrastructure, network, and operations teams
• Problem-solving approach to complex security design challenges
• Project coordination and task management capabilities
• Willingness to learn and adapt to new security technologies
• Security+ or SSCP (Systems Security Certified Practitioner) - Mandatory
• Network security certification: CCNA Security, Fortinet NSE4, or Palo Alto PCNSA - Required
• Infrastructure certification: MCSE, RHCE, or equivalent - Preferred
• CISSP Associate or working toward CISSP - Preferred
• Excellent command of both spoken and written English.