Network Security Engineer-Banking

Key Responsibilities *

• Own firewall and WAF rule life-cycle: design, change review, implementation, optimization, and periodic recertification.
• Manage SSL/TLS certificates, ciphers, and HSTS for internet-facing services; enforce secure crypto standards.
• Build and maintain site-to-site VPNs, SD-WAN, and secure remote access solutions across hybrid networks.
• Integrate network security controls with SIEM/SOAR and network telemetry; develop actionable runbooks.
• Implement Azure/AWS network security (VNet/VPC design, NSGs/NACLs, PrivateLink, Transit Gateway/Virtual WAN, Firewall/IDS/IPS).
• Deploy and govern cloud WAF and application gateways; integrate with native services where applicable.
• Embed guardrails (IaC policy, tagging, security blueprints) and support DevSecOps workflows.
• Required Skills *
• Expert hands-on with:
• F5 BIG-IP (ASM/Advanced WAF): policy tuning, attack signatures, bot and DDoS mitigation, iRules basics.
• Palo Alto Networks: security policy design, App-ID/URL filtering, Threat Prevention/WildFire, Panorama.
• Fortinet FortiGate/FortiManager/FortiAnalyzer: NGFW policies, IPS/AV/web filter, automation, logging.
• Citrix ADC (NetScaler): L7 load balancing, SSL/TLS, content switching, AppFW exposure.
• Strong Azure and AWS networking & security: VNet/VPC, peering, routing, NSG/NACL, Azure Firewall/AWS Network Firewall, Application Gateway/ALB/WAF, PrivateLink, Transit Gateway/Virtual WAN.
• Protocol depth: TCP/IP, BGP/OSPF, NAT, DNS, TLS, HTTP/S, IPsec/SSL VPN.
• Proven experience designing for high availability, performance, and security compliance.

Good-to-Have Skills

• Security first mindset with pragmatic delivery.
• Ownership, attention to detail, and strong troubleshooting under pressure.
• Collaboration across infra, app, SOC, and risk teams; mentoring capability.

Certifications Required F5: 301a/b (BIG-IP LTM), 302 (ASM/Advanced WAF) or equivalent practical mastery.

• Palo Alto: PCNSE.
• Fortinet: NSE 4–7 (NSE 7 highly desirable).
• Citrix: CCA-N/CCP-N (ADC).
• Cloud: Azure Security Engineer (AZ-500), AWS Security – Specialty (or Architect certs with strong security exposure).