About this role
<p><u><b>Overview:</b></u><br> <br> Nomura is a global financial services group with an integrated network spanning approximately 30 countries and regions. By connecting markets East & West, Nomura services the needs of individuals, institutions, corporates and governments through its three business divisions: Wealth Management, Investment Management, and Wholesale (Global Markets and Investment Banking). Founded in 1925, the firm is built on a tradition of disciplined entrepreneurship, serving clients with creative solutions and considered thought leadership. For further information about Nomura, visit <a href="http://www.nomura.com">www.nomura.com</a><br> <br> Nomura Services India, (Powai) supports Nomura’s businesses around the world. Powai’ s world class capabilities in trading support, research, information technology, financial control, operations, risk management and legal support have played a key role in facilitating Nomura’s global operations and are an integral part of Nomura’s global expansion plans. The Powai operation is a critical part of the platform to support the growth of Nomura’s global business.</p> <p style="margin:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif"><strong>FortiGate Firewall Operations & Management</strong></p> <ul style="margin-top:0.0cm;margin-bottom:0.0cm" type="disc"> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Deploy, and maintain enterprise FortiGate firewall infrastructure and Security Fabric</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Configure and optimize FortiGate security policies, NAT rules, and traffic shaping</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Manage FortiManager for centralized policy management and FortiAnalyzer for logging and reporting</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Implement and maintain FortiGate high availability (HA) clusters and virtual domains (VDOMs)</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Perform advanced troubleshooting using FortiGate CLI and diagnostic tools</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Manage FortiGate firmware upgrades, patches, and security updates</li> </ul> <p style="margin:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif"><strong>F5 BIG-IP Administration & Optimization</strong></p> <ul style="margin-top:0.0cm;margin-bottom:0.0cm" type="disc"> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Configure and maintain F5 BIG-IP systems including LTM, GTM, ASM, and APM modules</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Design advanced load balancing configurations with custom health monitors and persistence</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Implement SSL/TLS termination, certificate management, and SSL offloading strategies</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Develop and maintain complex iRules for application-specific traffic management</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Configure F5 Application Security Manager (ASM) policies and web application firewall rules</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Manage F5 Access Policy Manager (APM) for secure remote access and authentication</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Perform F5 system maintenance, upgrades, and disaster recovery procedures</li> </ul> <p style="margin:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif"><strong>Technical Leadership & Incident Response</strong></p> <ul style="margin-top:0.0cm;margin-bottom:0.0cm" type="disc"> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Serve as Level 3 escalation point for complex FortiGate and F5 technical issues</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Lead critical incident response for security breaches and application delivery failures</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Conduct root cause analysis and implement preventive measures</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Develop technical documentation, runbooks, and knowledge base articles</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Participate in 24/7 on-call rotation for emergency response</li> </ul> <p style="margin:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif"><strong>Required Qualifications</strong></p> <p style="margin:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif"><strong>Technical Skills</strong></p> <ul style="margin-top:0.0cm;margin-bottom:0.0cm" type="disc"> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif"><strong>Expert-level FortiGate proficiency:</strong></li> <ul style="margin-top:0.0cm;margin-bottom:0.0cm" type="circle"> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">FortiOS configuration and management</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">FortiManager and FortiAnalyzer administration</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Security Fabric implementation and management</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">VPN technologies (SSL VPN, IPSec)</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">VDOM configuration and management</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">FortiGate clustering and high availability</li> </ul> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif"><strong>Advanced F5 BIG-IP expertise:</strong></li> <ul style="margin-top:0.0cm;margin-bottom:0.0cm" type="circle"> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Local Traffic Manager (LTM) advanced configurations</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Global Traffic Manager (GTM) for DNS load balancing</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Application Security Manager (ASM) policy management</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Access Policy Manager (APM) implementation</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">iRules development and troubleshooting</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">SSL certificate lifecycle management</li> </ul> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Strong understanding of network protocols (TCP/IP, HTTP/HTTPS, DNS)</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Experience with network packet analysis and troubleshooting tools</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Knowledge of application delivery and web application security concepts</li> </ul> <p style="margin:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif"><strong>Certifications</strong></p> <ul style="margin-top:0.0cm;margin-bottom:0.0cm" type="disc"> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif"><strong>Fortinet Network Security Expert (NSE 7 or NSE 8) </strong></li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif"><strong>F5 Certified Technology Specialist (F5-CTS) </strong></li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">F5 Certified Solution Expert (F5-CSE) - Highly Preferred</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Fortinet NSE 4 Security Professional - Minimum Required</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Additional security certifications (CISSP, CISM) - Preferred</li> </ul> <p style="margin:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif"><strong>Experience</strong></p> <ul style="margin-top:0.0cm;margin-bottom:0.0cm" type="disc"> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Minimum 7-10 years of network security and application delivery experience</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">At least 4-5 years of hands-on FortiGate administration experience</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Minimum 3-4 years of F5 BIG-IP management experience</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Proven experience in large-scale enterprise environments (1000+ users)</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Background in incident response and security operations</li> </ul> <p style="margin:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif"><strong>Soft Skills</strong></p> <ul style="margin-top:0.0cm;margin-bottom:0.0cm" type="disc"> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Exceptional troubleshooting and analytical skills</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Strong communication abilities for technical and executive audiences</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Ability to work effectively under pressure during critical incidents</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Leadership and mentoring capabilities</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Detail-oriented with strong security mindset</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Flexibility for on-call duties and emergency response</li> </ul> <p style="margin:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif"><strong>Technical Environment</strong></p> <ul style="margin-top:0.0cm;margin-bottom:0.0cm" type="disc"> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">FortiGate firewalls (physical and virtual) in clustered configurations</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">FortiManager and FortiAnalyzer for centralized management</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">F5 BIG-IP systems in active-active and active-passive deployments</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Hybrid cloud environments with on-premises and cloud integration</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Enterprise monitoring and logging platforms</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Network automation and orchestration tools</li> </ul> <p style="margin:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif"><strong>Work Environment</strong></p> <ul style="margin-top:0.0cm;margin-bottom:0.0cm" type="disc"> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Hybrid work arrangement</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Rotating on-call schedule for critical system support</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Collaborative team environment with cross-functional projects</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Continuous learning culture with access to latest technologies</li> <li style="margin-bottom:10.0pt;line-height:115%;margin-top:0.0cm;margin-right:0.0cm;font-size:12.0pt;font-family:'Times New Roman', serif">Regular interaction with vendor technical support and engineering teams</li> </ul><p><u><b>Equal Opportunity Employer:</b></u><br> <br> Nomura is an equal opportunities employer. We are committed to providing equal opportunities throughout employment including in the recruitment, training and development of employees (including promotion, transfers, assignments and beliefs). We prohibit discrimination in the workplace whether on grounds of gender, marital or domestic partnership status, pregnancy, career’s responsibilities, sexual orientation, gender identity, race, color, national or ethnic origins, religious belief, disability or age. Our objective is to attract job applications and applications for development from the best possible candidates and to retain the best people.</p>