Job Title: Firewall Engineer

Experience: 8+ Years

Location: PAN India

Employment Type: Full-Time

Job Summary:

We are seeking an experienced Firewall Engineer with 8+ years of expertise in designing, implementing, managing, and securing enterprise network security infrastructure.

The ideal candidate will have strong hands-on experience with next-generation firewalls, network security technologies, VPNs, security policies, and threat prevention solutions.

The role requires ensuring the security, availability, and performance of network environments while supporting business-critical operations.

Key Responsibilities:

- Design, implement, and manage enterprise firewall infrastructure across on-premises and cloud environments.

- Configure, deploy, and maintain firewall policies, access control rules, NAT configurations, and security zones.

- Administer next-generation firewall platforms to ensure network security and compliance.

- Manage and support site-to-site VPNs, remote access VPNs, and secure connectivity solutions.

- Perform firewall rule analysis, optimization, cleanup, and recertification activities.

- Monitor firewall logs, security events, and traffic patterns to identify potential threats and vulnerabilities.

- Troubleshoot complex network security incidents and perform root cause analysis.

- Implement intrusion prevention, threat detection, malware protection, and web filtering solutions.

- Conduct security assessments, firewall audits, and compliance reviews.

- Support vulnerability management initiatives and remediation activities.

- Collaborate with network, infrastructure, cloud, and security teams to implement secure network architectures.

- Review and approve firewall change requests in accordance with organizational security standards.

- Ensure high availability and disaster recovery configurations for firewall environments.

- Participate in security incident investigations and forensic analysis when required.

- Develop and maintain firewall standards, procedures, technical documentation, and network diagrams.

- Support security projects, technology upgrades, and migration initiatives.

- Optimize firewall performance and ensure minimal impact on network operations.

- Implement network segmentation and zero-trust security principles where applicable.

- Stay updated on emerging cybersecurity threats, firewall technologies, and industry best practices.

- Provide technical guidance and support to junior engineers and operational teams.

Required Skillsets:

- Strong experience in enterprise firewall administration and network security.

- Hands-on expertise with Palo Alto Networks Firewalls.

- Experience with Fortinet FortiGate Firewalls.

- Strong knowledge of Cisco ASA and Cisco Firepower solutions.

- Experience with Check Point Firewall technologies.

- Knowledge of Juniper SRX security platforms.

- Expertise in firewall policy management, NAT, routing, and access control implementation.

- Strong understanding of TCP/IP, DNS, DHCP, BGP, OSPF, VLANs, and network protocols.

- Experience with VPN technologies including IPSec and SSL VPN.

- Knowledge of Intrusion Prevention Systems (IPS) and Intrusion Detection Systems (IDS).

- Experience with Web Application Firewalls (WAF).

- Understanding of network segmentation and micro-segmentation concepts.

- Familiarity with SIEM platforms and security monitoring tools.

- Experience with security compliance frameworks such as ISO 27001, PCI-DSS, NIST, and CIS Controls.

- Knowledge of cloud network security in AWS, Azure, and Google Cloud environments.

- Experience with vulnerability management and security assessment tools.

- Understanding of threat intelligence and incident response processes.

- Strong troubleshooting, analytical, and problem-solving skills.

- Experience with change management and ITIL processes.

- Excellent communication and stakeholder management abilities.

Preferred Qualifications:

- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field.

- Palo Alto Networks Certified Network Security Engineer (PCNSE).

- Fortinet NSE Certification.

- Check Point Certified Security Expert (CCSE).

- Cisco CCNP Security or equivalent certification.

- Certified Information Systems Security Professional (CISSP) certification is a plus.

- Experience working in enterprise, banking, financial services, healthcare, telecom, or large-scale IT environments.

- Exposure to automation and scripting using Python, PowerShell, or Ansible.

- Experience with Zero Trust Architecture and Secure Access Service Edge (SASE) solutions.