Firewall Engineer

Overview:

We are seeking an experienced Senior Firewall Engineer to support the deployment, implementation, and management of enterprise network security solutions across complex customer environments. The successful candidate will have extensive hands-on experience with leading firewall technologies, including Fortinet FortiGate, Cisco ASA, Palo Alto, and Check Point, and will play a key role in delivering secure network infrastructure projects.

The role primarily focuses on firewall implementation, migrations, security policy deployment, and troubleshooting within enterprise and data centre environments. Exposure to proxy technologies, automation, scripting, and Linux administration would be advantageous.

Responsibilities:

• Deploy, configure, and implement enterprise firewall solutions across customer environments.
• Install, configure, and support Fortinet FortiGate, Cisco ASA, Palo Alto, and Check Point firewalls.
• Perform firewall policy creation, optimisation, and rule management in accordance with security standards.
• Execute firewall migrations, upgrades, hardware refreshes, and software updates.
• Support deployment activities, including implementation planning, cutovers, and post-deployment validation.
• Troubleshoot complex firewall and network security issues and perform root cause analysis.
• Collaborate with network, security, infrastructure, and project teams to deliver customer projects.
• Implement NAT, VPN (Site-to-Site and Remote Access), IPS, URL filtering, and security policies.
• Assist with firewall high availability (HA) configurations and failover testing.
• Support security compliance by ensuring firewall configurations adhere to organisational standards and best practices.
• Maintain implementation documentation, configuration backups, and operational procedures.
• Participate in change management processes and ensure all activities follow approved implementation plans.
• Provide technical support during planned maintenance windows and network cutovers where required.

Requirements:

Mandatory Skills & Experience

• Minimum 6 years of hands-on experience implementing and supporting enterprise firewall solutions.
• Strong deployment and implementation experience with:
  • Fortinet FortiGate
  • Cisco ASA
  • Palo Alto Networks Firewalls
  • Check Point Firewalls
• Strong understanding of Routing & Switching fundamentals to support firewall deployments.
• Experience implementing:
  • Security Policies
  • NAT
  • VPN (IPSec & SSL)
  • Access Control Lists (ACLs)
  • High Availability (HA)
• Experience with firewall migrations, upgrades, and production cutovers.
• Strong troubleshooting and root cause analysis skills across network security environments.
• Experience working in enterprise and data centre environments.
• Familiarity with ITIL processes and change management.

Good to Have

• Experience with Zscaler Internet Access (ZIA) or Zscaler Proxy.
• Exposure to other secure web gateway/proxy solutions.
• Experience with automation and scripting tools (Python, Ansible, Bash, PowerShell).
• Basic Linux administration and troubleshooting skills.
• Knowledge of Infrastructure as Code (IaC) or network automation frameworks.
• Exposure to cloud security networking (AWS, Azure, GCP).

Preferred Certifications

• Palo Alto Networks Certified Network Security Engineer (PCNSE)
• Fortinet NSE 4 / NSE 5 / FCP Network Security
• Check Point CCSA / CCSE
• Cisco CCNP Security
• ITIL Foundation

Key Competencies

• Strong analytical and troubleshooting skills.
• Excellent communication and stakeholder management abilities.
• Ability to work independently and collaboratively within project teams.
• Customer-focused with a proactive approach to problem-solving.
• Strong documentation and technical reporting skills.
• Ability to manage multiple deployment activities and work effectively under pressure.