Network Security Engineer

Mandatory skills: Palo Alto, Check Point , Zscaler, AWS.

Good to have : GCP, Azure, SCM(Strata Cloud Manager)

Key Responsibilities

Firewall Security Operations

              Administer and support documented firewall platforms including Palo Alto and Check Point environments

              Manage firewall policies NAT rules security zones URL filtering and application controls

              Perform firewall rule additions modifications deletions and recertification activities

              Configure and troubleshoot SitetoSite VPNs IPsec tunnels and remote access connectivity

              Perform firewall health monitoring HA validation failover testing and capacity management

Zscaler Security Administration

              Support Zscaler Internet Access ZIA and Secure Internet Gateway services

              Configure security policies URL filtering SSL inspection and traffic forwarding

              Troubleshoot user access application connectivity and Zscaler traffic flows

              Coordinate security policy integration between Zscaler and enterprise firewalls

Routing  Switching

              Configure and troubleshoot enterprise routing protocols including BGP OSPF EIGRP and Static Routing

              Support Cisco LANWAN infrastructure VLANs STP HSRP VRRP and Layer 2Layer 3 services

              Analyze traffic flows and resolve routing switching and connectivity issues

              Perform network segmentation and secure connectivity design

Security Governance  Compliance

              Ensure firewall policy compliance and adherence to security standards

              Conduct security reviews and rulebase optimization

              Support vulnerability remediation firmware upgrades and security audits

              Maintain documentation security baselines and change records

Incident  Problem Management

              Investigate and resolve P1P2 security incidents

              Perform packet captures traffic analysis and root cause analysis

              Collaborate with Cyber Security Infrastructure Cloud and Application teams

              Support 24x7 operational and escalation activities

Change  Project Implementation

              Prepare and execute MOPs implementation plans validation procedures and rollback strategies

              Participate in firewall migrations network transformations and security enhancement projects

              Support PANOS upgrades Check Point upgrades and security platform lifecycle management

Required Technical Skills

Security Platforms

              Palo Alto Firewalls

              Panorama

              Check Point Firewall

              Check Point SmartConsole

              Zscaler ZIA  ZPA

              IPsec VPN

              SSL VPN

              Network Access Control

Routing  Switching

              Cisco Routing  Switching

              BGP

              OSPF

              EIGRP

              VLANs

              STP

              HSRP  VRRP

              ACLs

Security Concepts

              NAT

              Security Zones

              IDSIPS

              URL Filtering

              Application Control

              Network Segmentation

              Zero Trust Security

              Secure Internet Gateway SIG

Monitoring  Tools

              LogicMonitor

              SolarWinds

              Wireshark

              ServiceNow

              Panorama

              Check Point SmartConsole

Preferred Certifications

              PCNSA  PCNSE Palo Alto

              CCSA  CCSE Check Point

              Zscaler Certified Administrator

              CCNP Enterprise

              CCNP Security

              ITIL Foundation

Experience

              5 years of Network Security and Firewall Administration experience

              Handson experience with Palo Alto Check Point and Zscaler environments

              Strong knowledge of routing switching security policies VPNs and enterprise network operations

              Experience supporting global enterprise or managed security service environments

Key Competencies

              Firewall Policy Management

              Security Incident Response

              Threat Mitigation

              Change Management  MOP Development

              Root Cause Analysis

              Stakeholder  Vendor Management

              Operational Excellence and Governance