Infrastructure Security Consulting

RESPONSIBILITIES
• Secure aircraft and ground systems by implementing and maintaining the ANSP, including PKI, VPN, and zero-trust solutions.
• Manage and maintain server infrastructure (Windows and Linux) supporting cybersecurity systems.
• Configure and manage network devices, including firewalls, VPN gateways, and intrusion detection systems.
• Manage cryptographic keys and digital certificates, ensuring compliance with industry standards.
• Respond to and manage security incidents, including forensic analysis and remediation.
• Collaborate with stakeholders to ensure secure and efficient operations.
• Stay updated on the latest developments in aircraft IT and network security.
• Support the development of security training programs.
• Monitor aviation systems for suspicious activities and analyze logs to identify threats.
• Perform risk assessments and ensure compliance with aviation-specific cybersecurity frameworks.
• Collect and analyze threat intelligence data, staying informed about emerging threats.
• Secure cloud environments for security log analysis and reporting. Includes designing the secure cloud architecture, configuring security groups, implementing IAM policies, ensuring data encryption (at rest and in transit).
• Conduct comprehensive security posture assessments of our ANSP ground systems.

SKILLS
• Deep Cybersecurity Expertise: Requires 3-5+ years of progressive cybersecurity engineering experience with deep understanding of network, systems (including Windows and Linux server administration), cloud, and PKI security principles and technologies.
• Hands-on Technical Skills: Proficiency in managing firewalls, VPNs, IDPS, ZTNA, EDR, vulnerability scanning, configuration management tools, and CSPM solutions. Also includes demonstrated experience in Windows and Linux server configuration, hardening, maintenance, and security patching.
• Cloud & PKI Focus: Expertise in cloud security (AWS or Azure) and extensive experience with PKI infrastructure, certificate lifecycle management, and key management are essential.
• Secure Architecture & Vulnerability Management: Ability to design secure network architectures and conduct security assessments to identify and mitigate vulnerabilities, including system-level vulnerabilities on Windows and Linux servers.
• Aviation Security Contribution: Will contribute to critical FAA aircraft network security program duties, including securing communication between aircraft and ground systems, collaborating with OEMs, and ensuring the security and integrity of underlying Windows and Linux server infrastructure.

TOOLS AND TECHNOLOGIES
Network Security
• Enterprise-grade Firewalls: (e.g., Cisco Firepower, Palo Alto Networks, Fortinet)
• VPN & ZTNA Technologies: (e.g., RRAS, Tempered Airwall, Cisco AnyConnect, Zscaler, OpenVPN)
• Intrusion Detection/Prevention Systems (IDPS): (e.g., Snort, Suricata, Zeek)
• Monitoring Tools: (e.g., Wireshark)
• Experience with multiple vendors within these categories is beneficial.

System Security (Server & Endpoint)
• Windows & Linux Server Security: Configuration, Hardening, Patching, Microsoft Active Directory and Group Policy
• Endpoint Detection and Response (EDR): (e.g., CrowdStrike Falcon, Microsoft Defender for Endpoint)
• Vulnerability Scanning: (e.g., Tenable Nessus, Tanium Comply)
• Configuration Management (for Security Automation): (e.g., Ansible, Puppet, Chef)

Cloud Security (AWS or Azure Focus)
• Cloud Security Posture Management (CSPM): (e.g., AWS Security Hub, Azure Security Center)
• Cloud IAM & Access Control (AWS IAM, Azure AD)
• Cloud Security Services: (AWS & Azure native security offerings)

Public Key Infrastructure (PKI)
• Certificate Authorities (CA): (e.g., Microsoft AD CS, OpenSSL)
• Key Management Systems (KMS): (e.g., Hardware HSMs, AWS KMS, Azure Key Vault, HashiCorp Vault)

Deliver

No.

Performance Parameter

Measure

1.

Customer centricity

Timely security breach solutioning to end users, Internal stakeholders & external customers experience

2.

Process Adherence

Adherence to SLA’s (90-95%), response time and resolution time TAT

Mandatory Skills: Infrastructure Security Consulting.

Experience: 5-8 Years.

Expected annual pay for this role ranges from $60,000 to $1,35,000 . Based on the position, the role is also eligible for Wipro's standard benefits including a full range of medical and dental benefits options, disability insurance, paid time off (inclusive of sick leave), other paid and unpaid leave options.

Reinvent your world. We are building a modern Wipro. We are an end-to-end digital transformation partner with the boldest ambitions. To realize them, we need people inspired by reinvention. Of yourself, your career, and your skills. We want to see the constant evolution of our business and our industry. It has always been in our DNA - as the world around us changes, so do we. Join a business powered by purpose and a place that empowers you to design your own reinvention. Come to Wipro. Realize your ambitions. Applications from people with disabilities are explicitly welcome.

If you encounter any suspicious mail, advertisements, or persons who offer jobs at Wipro, please email us at helpdesk.recruitment@wipro.com. Do not email your resume to this ID as it is not monitored for resumes and career applications.

Any complaints or concerns regarding unethical/unfair hiring practices should be directed to our Ombuds Group at ombuds.person@wipro.com.

We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, caste, creed, religion, gender, marital status, age, ethnic and national origin, gender identity, gender expression, sexual orientation, political orientation, disability status, protected veteran status, or any other characteristic protected by law.

Wipro is committed to creating an accessible, supportive, and inclusive workplace. Reasonable accommodation will be provided to all applicants including persons with disabilities, throughout the recruitment and selection process. Accommodations must be communicated in advance of the application, where possible, and will be reviewed on an individual basis. Wipro provides equal opportunities to all and values diversity.