Track Lead - CheckPoint PPC (Software), Cloud Security
India
Job Description
Track Lead - CheckPoint PPC (Software), Cloud Security
Bengaluru, Karnataka

Job Summary

ROLE SUMMARY Owns remediation across SG\'s exposed Fortinet firewall fleet. Largest single line in the exposed-network scope and a critical-path platform for 24h SLA attainment. KEY RESPONSIBILITIES ■ Triage and remediate FortiGate, FortiOS, and related Fortinet platform vulnerabilities within 24h. ■ Plan and execute HA-aware patching to maintain service continuity. ■ Apply emergency mitigations (IPS signatures, config tweaks) when patches are unavailable. ■ Coordinate with network engineering for cross-zone impact. ■ Maintain runbooks for major-CVE response on FortiOS. ■ Contribute to Phase 2 automation candidates. REQUIRED TECHNICAL SKILLS ■ Deep FortiOS administration: clustering, VDOMs, IPSec, SSL VPN, IPS. ■ Strong understanding of firewall HA patching patterns. ■ Familiarity with FortiManager and FortiAnalyzer. ■ Comfortable with vendor-advisory triage and rapid response. PREFERRED / NICE TO HAVE ■ Fortinet NSE 5 / 6 / 7 certifications. ■ Experience with FortiCloud, FortiSASE or similar. ■ Scripting in Python or FortiOS automation stitches. EXPERIENCE & CERTIFICATIONS ■ 5+ years operating Fortinet at enterprise scale. ■ Certifications: NSE 4 minimum; NSE 5–7 preferred. SOFT SKILLS ■ High discipline under SLA pressure. ■ Strong team operator — rotation works only with crisp handovers. ■ Methodical documentation.

Key Responsibilities

ROLE SUMMARY Owns remediation across SG\'s exposed Fortinet firewall fleet. Largest single line in the exposed-network scope and a critical-path platform for 24h SLA attainment. KEY RESPONSIBILITIES ■ Triage and remediate FortiGate, FortiOS, and related Fortinet platform vulnerabilities within 24h. ■ Plan and execute HA-aware patching to maintain service continuity. ■ Apply emergency mitigations (IPS signatures, config tweaks) when patches are unavailable. ■ Coordinate with network engineering for cross-zone impact. ■ Maintain runbooks for major-CVE response on FortiOS. ■ Contribute to Phase 2 automation candidates. REQUIRED TECHNICAL SKILLS ■ Deep FortiOS administration: clustering, VDOMs, IPSec, SSL VPN, IPS. ■ Strong understanding of firewall HA patching patterns. ■ Familiarity with FortiManager and FortiAnalyzer. ■ Comfortable with vendor-advisory triage and rapid response. PREFERRED / NICE TO HAVE ■ Fortinet NSE 5 / 6 / 7 certifications. ■ Experience with FortiCloud, FortiSASE or similar. ■ Scripting in Python or FortiOS automation stitches. EXPERIENCE & CERTIFICATIONS ■ 5+ years operating Fortinet at enterprise scale. ■ Certifications: NSE 4 minimum; NSE 5–7 preferred. SOFT SKILLS ■ High discipline under SLA pressure. ■ Strong team operator — rotation works only with crisp handovers. ■ Methodical documentation.

Skill Requirements

ROLE SUMMARY Owns remediation across SG\'s exposed Fortinet firewall fleet. Largest single line in the exposed-network scope and a critical-path platform for 24h SLA attainment. KEY RESPONSIBILITIES ■ Triage and remediate FortiGate, FortiOS, and related Fortinet platform vulnerabilities within 24h. ■ Plan and execute HA-aware patching to maintain service continuity. ■ Apply emergency mitigations (IPS signatures, config tweaks) when patches are unavailable. ■ Coordinate with network engineering for cross-zone impact. ■ Maintain runbooks for major-CVE response on FortiOS. ■ Contribute to Phase 2 automation candidates. REQUIRED TECHNICAL SKILLS ■ Deep FortiOS administration: clustering, VDOMs, IPSec, SSL VPN, IPS. ■ Strong understanding of firewall HA patching patterns. ■ Familiarity with FortiManager and FortiAnalyzer. ■ Comfortable with vendor-advisory triage and rapid response. PREFERRED / NICE TO HAVE ■ Fortinet NSE 5 / 6 / 7 certifications. ■ Experience with FortiCloud, FortiSASE or similar. ■ Scripting in Python or FortiOS automation stitches. EXPERIENCE & CERTIFICATIONS ■ 5+ years operating Fortinet at enterprise scale. ■ Certifications: NSE 4 minimum; NSE 5–7 preferred. SOFT SKILLS ■ High discipline under SLA pressure. ■ Strong team operator — rotation works only with crisp handovers. ■ Methodical documentation.

Other Requirements

ROLE SUMMARY Owns remediation across SG\'s exposed Fortinet firewall fleet. Largest single line in the exposed-network scope and a critical-path platform for 24h SLA attainment. KEY RESPONSIBILITIES ■ Triage and remediate FortiGate, FortiOS, and related Fortinet platform vulnerabilities within 24h. ■ Plan and execute HA-aware patching to maintain service continuity. ■ Apply emergency mitigations (IPS signatures, config tweaks) when patches are unavailable. ■ Coordinate with network engineering for cross-zone impact. ■ Maintain runbooks for major-CVE response on FortiOS. ■ Contribute to Phase 2 automation candidates. REQUIRED TECHNICAL SKILLS ■ Deep FortiOS administration: clustering, VDOMs, IPSec, SSL VPN, IPS. ■ Strong understanding of firewall HA patching patterns. ■ Familiarity with FortiManager and FortiAnalyzer. ■ Comfortable with vendor-advisory triage and rapid response. PREFERRED / NICE TO HAVE ■ Fortinet NSE 5 / 6 / 7 certifications. ■ Experience with FortiCloud, FortiSASE or similar. ■ Scripting in Python or FortiOS automation stitches. EXPERIENCE & CERTIFICATIONS ■ 5+ years operating Fortinet at enterprise scale. ■ Certifications: NSE 4 minimum; NSE 5–7 preferred. SOFT SKILLS ■ High discipline under SLA pressure. ■ Strong team operator — rotation works only with crisp handovers. ■ Methodical documentation.

Information at a Glance

Why HCLTech?

At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first.

HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026 totaled $14.8 billion.