Job Summary
- Azure or AWS network security
- SASE and Zero Trust knowledge
- Scripting in Python, PowerShell or Bash
- Certifications: PCNSE, CCNP Security, F5 Certified Administrator, Citrix NetScaler certification, Zscaler Certified Administrator, CISSP
Key Responsibilities
- Act as the L3 escalation point for all security incidents and problems
- Lead troubleshooting of critical issues on Palo Alto, FortiGate, Cisco ASA, Forcepoint, Zscaler, F5, NetScaler and Peplink platforms
- Review, implement and optimize firewall policies, VPN configurations and security controls
- Support firewall migrations, software upgrades, hardware refresh and security transformation projects
- Perform root cause analysis (RCA) and drive permanent fixes for recurring issues
- Collaborate with Network, Cloud, Server and Application teams during major incidents
- Mentor L1/L2 engineers and provide technical leadership
- Drive continuous improvement of security posture and operational processes
Skill Requirements
- 8-12 years of experience in enterprise network security
- Hands-on with Palo Alto firewalls (Panorama, GlobalProtect) and Cisco ASA
- Working experience with Fortinet FortiGate firewalls(policy management, VPN, troubleshooting)
- Strong firewall policy management: rule review, NAT, security zones, traffic analysis
- Site-to-site and remote access VPN (IPSec, SSL, GlobalProtect)
- Zscaler (ZIA/ZPA) and Forcepoint Secure Web Gateway
- Load balancers: F5 BIG-IP and Citrix NetScaler (virtual servers, pools/service groups, SSL certificates, traffic management)
- Peplink SD-WAN (InControl2)
- Solid TCP/IP, BGP, OSPF, VLANs, plus DNS, DHCP and IPAM
- Packet capture and analysis (Wireshark, tcpdump, vendor tools)
- Experience with firewall migrations and upgrade projects
- ITIL practices: Incident, Problem, Change and Major Incident Management
- Monitoring tools such as SolarWinds
- Ability to create HLDs, LLDs, SOPs and technical documentation
- Strong communication and stakeholder management skills
- Willingness to work in a 24x7 operational environment
Other Requirements
Palo Alto, Panorama, GlobalProtect, FortiGate, Cisco ASA, Zscaler, Forcepoint, F5 BIG-IP, NetScaler, Peplink, SD-WAN, Firewall, VPN, Network Security, ITIL, Root Cause Analysis