Lead Systems Engineer - Network Security (26000JAK)

Position Description
Company Profile:

At CGI, we’re a team of builders. We call our employees members because all who join CGI are building their own company - one that has grown to 72,000 professionals located in 40 countries. Founded in 1976, CGI is a leading IT and business process services firm committed to helping clients succeed. We have the global resources, expertise, stability and dedicated professionals needed to achieve. At CGI, we’re a team of builders. We call our employees members because all who join CGI are building their own company - one that has grown to 72,000 professionals located in 40 countries. Founded in 1976, CGI is a leading IT and business process services firm committed to helping clients succeed. We have the global resources, expertise, stability and dedicated professionals needed to achieve results for our clients - and for our members. Come grow with us. Learn more at
This is a great opportunity to join a winning team. CGI offers a competitive compensation package with opportunities for growth and professional development. Benefits for full-time, permanent members start on the first day of employment and include a paid time-off program and profit participation and stock purchase plans. We wish to thank all applicants for their interest and effort in applying for this position, however, only candidates selected for interviews will be contacted. No unsolicited agency referrals please.

Job Title: Lead Systems Engineer
Position: Lead Systems Engineer Network Security
Experience: 8+ Years
Category: Infrastructure /Cloud
Location: Bangalore
Position ID: J1026-1291
Employment Type: Full-time

Role Type: Full time . Level: Lead Engineer (Delivery & Execution)Location: Bangalore . Reports to: Network Infrastructure ManagerTeams interfaced: Architecture, Business Units, Security, PMO, Service Desk, Vendors

Role Summary:
We are seeking a Lead Network Engineer with strong hands on expertise in data center networking and security technologies to deliver and operate critical infrastructure. This role follows the “You deploy, you run” model—meaning you will implement solutions and also support them in production. Responsibilities include preparing Low Level Designs (LLDs) from High Level Designs (HLDs), executing deployments, managing incidents, and ensuring operational stability. You will also work closely with business and technical teams to communicate progress, risks, and outcomes throughout the project lifecycle and BAU operations.

Key Responsibilities:
Project Lifecycle & Delivery

. Participate in project initiation by reviewing HLDs and understanding scope, timelines, and dependencies.
. Prepare LLDs, configuration templates, and implementation plans based on approved HLDs.
. Execute build, configuration, and deployment activities for network and security components.
. Conduct testing and validation (UAT, failover, performance) before production cutover.
. Support go live activities, including risk mitigation and rollback planning.
. Track and report project progress, risks, and issues to stakeholders and PMO.

Operations & Service Delivery

. Own the deployed solutions in production—monitor, maintain, and optimize performance.
. Act as L3 escalation point for critical incidents and complex changes.
. Drive root cause analysis and implement permanent fixes.
. Maintain accurate change records and adhere to ITIL processes.
. Ensure compliance with security and audit requirements.

Stakeholder Communication

. Provide clear updates on incident status, project progress, and risks to business and technical teams.
. Collaborate with architecture, security, and application teams to align on requirements and timelines.

Operational Excellence

. Maintain network diagrams, LLDs, and configuration repositories.
. Support audits and compliance requirements for security and infrastructure.
. Identify opportunities for automation and process improvement.

Core Technology Scope

. Networking: BGP, OSPF, EVPN/VXLAN, MPLS, QoS
. Data Center Platforms: Cisco Nexus / ACI
. Security: Firewalls: Palo Alto, Check Point (policy, NAT, VPN) VPN (F5), NAC (Cisco ISE/ClearPass)
. SD WAN: Managed service as part of SASE model (candidate will interface, not configure end to end)
. Secure Web Gateway: Zscaler (basic awareness; not primary responsibility)
. Load Balancing: F5 BIG IP, Citrix Netscaler
. Automation: Ansible, Python, Git (preferred)
. Tooling: ThousandEyes, NetFlow tools

Requirements:

. 10+ years in network engineering with strong hands on experience in data center networking and security.
. Proven ability to prepare LLDs and execute deployments based on HLDs.
. Expertise in troubleshooting and resolving complex network/security issues.
. Familiarity with SD WAN and SASE concepts (managed service coordination).
. Strong understanding of ITIL processes and change governance.
. Excellent communication and stakeholder management skills.

Preferred Certifications

. CCNP/CCIE
. Palo Alto PCNSE, Check Point CCSA/CCSE
. F5 CTS, VMware VCP NV
. Automation skills (Ansible, Python)

Success Metrics

. On time delivery of projects and changes
. Reduction in incident MTTR
. Compliance with security and audit standards
. Positive stakeholder feedback

#LI-SA2

Your future duties and responsibilities

Required qualifications to be successful in this role

Together, as owners, let’s turn meaningful insights into action.

Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because…

You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction.

Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.

You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.

That same commitment to fairness extends to how we use technology. To support our recruitment team, AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals.

Come join our team—one of the largest IT and business consulting services firms in the world.

Lead Systems Engineer - Network Security (26000JAK)

Start with your email