Job Summary
Cybersecurity Network Security Engineer (Firewall, VPN & Proxy) - SME with 9+ years of experience in enterprise network security operations and engineering. Responsible for administration, advanced troubleshooting, security policy management, major incident resolution, threat mitigation, security hardening, network segmentation, remote access security, platform upgrades, and operational governance of Firewall, VPN, and Proxy technologies.
Key Responsibilities
Administer and manage enterprise Firewall, VPN, and Secure Proxy infrastructure. • Configure and maintain security policies, NAT rules, security zones, ACLs, and access controls. • Troubleshoot complex network security incidents involving firewall traffic flows, VPN connectivity, proxy access, and security policy enforcement. • Lead resolution of critical cybersecurity and network security incidents. • Perform detailed Root Cause Analysis (RCA) and implement corrective actions. • Implement security hardening, platform upgrades, patch management, and vulnerability remediation. • Manage site-to-site VPN, remote access VPN, IPSec, SSL VPN, and third-party connectivity. • Support network segmentation, micro-segmentation, zero-trust initiatives, and security compliance requirements. • Analyze firewall, proxy, and VPN logs to identify security threats, anomalies, and policy violations. • Collaborate with SOC, IAM, Infrastructure, Cloud, and Network teams on security initiatives. • Maintain technical documentation, SOPs, operational dashboards, and compliance artifacts. • Provide L3 escalation support and technical leadership for security operations teams. • Participate in major incident and on-call support activities.
Skill Requirements
Strong hands-on expertise with enterprise Firewall, VPN, and Proxy technologies. • Experience with platforms such as Palo Alto, Check Point, Fortinet FortiGate, Cisco Firepower/ASA, Juniper SRX, Zscaler, Blue Coat/Symantec ProxySG, McAfee Secure Web Gateway, or equivalent. • Strong knowledge of TCP/IP, Routing, Switching, NAT, ACLs, DNS, and Network Security. • Experience managing IPSec VPN, SSL VPN, Site-to-Site VPN, and Remote Access VPN solutions. • Strong understanding of network segmentation, security zoning, DMZ design, and Zero Trust concepts. • Experience with firewall rule reviews, policy optimization, and security governance. • Knowledge of IDS/IPS, Web Security, URL Filtering, Threat Prevention, and Secure Web Gateway technologies. • Experience with SIEM tools (Splunk, Sentinel, QRadar, ArcSight) and log analysis. • Strong knowledge of Incident Management, Problem Management, Change Management, and RCA. • Understanding of cybersecurity frameworks such as NIST, ISO 27001, CIS Controls, and security best practices. • Excellent troubleshooting, stakeholder management, vendor coordination, and documentation skills. • Security certifications such as PCNSE, NSE, CCSA/CCSE, CISSP, Security+, or equivalent preferred.
Other Requirements
NA