Job Description :

We are seeking a highly skilled Senior Network Security Engineer with a minimum of 5 years of experience to join our infrastructure security team. This role focuses on the design, implementation, and management of enterprise-grade security solutions across multiple platforms, ensuring high availability and robust protection of our corporate network.

Key Responsibilities :

- Firewall Administration : Manage, configure, and troubleshoot enterprise firewalls, including Palo Alto (Strata/Prisma), Check Point (R8x), and Fortinet (FortiGate).

- VPN Management : Design and support secure remote access solutions using GlobalProtect and IPsec VPN tunnels for site-to-site connectivity.

- Incident Management : Act as a technical lead for security incidents, identifying root causes and performing remediation to minimize downtime.

- Service Request Management : Efficiently handle lifecycle requests (Rule additions, NAT configurations, Object creation) using ServiceNow.

- Network Operations : Maintain core networking standards including VLAN segmentation, routing protocols, and general CCNA-level troubleshooting.

- Policy Optimization : Periodically audit firewall rules to ensure compliance and remove redundant or insecure configurations.

Required Qualifications & Skills :

- Experience : 5+ years of hands-on experience in Network Security or Cloud Security roles.

- Platform Expertise :

- Palo Alto : Deep understanding of App-ID, Content-ID, and User-ID policies.

- Check Point : Experience with Gaia OS and SmartConsole management.

- Fortinet : Proficiency with FortiManager and FortiAnalyzer.

- Networking Fundamentals : Strong grasp of the OSI model, TCP/IP, Subnetting, and Inter-VLAN routing.

- VPN Technology : Proven experience in managing Remote Access (GlobalProtect) and Site-to-Site VPNs.

- ITSM Tools : Experience working within an ITIL framework, specifically using ServiceNow for change and incident tracking.

Preferred / Good-to-Have Skills :

- Application Delivery : Hands-on experience with F5 LTM/GTM (Big-IP) for load balancing and traffic management.

- Troubleshooting : Advanced packet analysis using Wireshark or tcpdump.

- Certifications : PCNSA/PCNSE, CCSA/CCSE, NSE 4/5, or CCNA Security.