We are looking for an experienced L3 Network Security Engineer to support a large-scale Firewall Migration Project, transitioning firewalls from Cisco ASA (5508,5525,5545,5555 etc.) to Cisco Firepower and Palo Alto Next-Gen Firewalls (including 1410 models, VSYS, and VM-Series). The candidate will work closely with technical leads to execute migration activities, validate configurations, and support post-migration troubleshooting

Key Responsibilities :

Participate in the migration and config conversion of :

- ASA Palo Alto (1410 VSYS, 1410 Single Tenant & VM-Series)

- ASA Cisco Firepower with ASA Code or FTD

- Perform configuration conversion using tools and manual methods

Configure and validate :

- NAT policies (Static, Dynamic)

- Site-to-Site VPNs and Client-to-Site VPNs (AnyConnect/Global Protect)

- Firewall Policies, HA, SSL VPNs, NextGen features (IPS/IDS)

- Strong knowledge of change/Incident management process

- Conduct pre- and post-migration validation

- Support change windows, participate in troubleshooting during cutovers

- Document configurations and migration steps

- Collaborate with L4 engineers and stakeholders during complex migrations

Must-Have Skills :

Hands-on experience with :

- Cisco ASA

- Cisco FTD/Firepower

- Palo Alto NGFW (including 1410, VM-Series, VSYS)

- Palo Alto NGFW (VSYS, Panorama, Expedition, Migration Manager)

Strong command of :

- Cisco ASA- ACL, VPN setup (IPSec/SSL), AnyConnect, HA Setup,NAT, Policy Management, OS Upgrade

- Palo Alto- VPN setup (IPSec/SSL), Global protect, HA Setup, NAT, Policy Management, PANOS Upgrade

- Routing protocols (Static, OSPF, BGP) and switching fundamentals

- Experience in ASA to Palo Alto / Firepower config conversion

- Familiarity with tools like Expedition, Migration Manager, or similar

- Solid troubleshooting and packet capture analysis skills

Soft Skills & Professional Attributes :

- Excellent interpersonal and communication skills able to clearly articulate ideas, processes, and technical concepts to both technical and non-technical audiences

- Strong documentation abilities capable of creating and maintaining clear, concise technical documentation and procedures

- Flexible, proactive, and self-driven demonstrates initiative, reliability, and adaptability in dynamic environments

Preferred Certifications :

- Cisco Certifications : CCNP Security / CCNP R&S

- Palo Alto Certifications : PCNSA/PCNSE