Network Security Engineer / Firewall Security Engineer

Network Security Engineer / Firewall Security Engineer

Key Deliverables and Responsibilities (Mandatory)

• 10- 15 years of experience with security processes and solutions.
• Detailed technical experience in the installation, configuration, and operation of high-end firewall appliances, ideally Palo Alto Networks, cisco FTD, checkpoint, Zscaler and fortinet products.
• Strong understanding of core Internet protocols, TCP/IP, computer networking, routing, and switching protocols, Network packet inspection and forensics.
• Experience with Cisco Routers, Switches, AAA, and TACACS.
• Research, evaluate, develop, and implement security solutions and standards following industry best practices.
• Work with other teams to design, develop, and implement Enterprise Security solutions in support of development, test, and production environments.
• Provide technical security expertise and assistance to other IT and business groups.
• Perform security audits and testing; evaluate system security configurations to ensure efficacy and compliance with policies and procedures.
• Design, develop, and maintain automation frameworks for firewall policy life cycle management including rule creation, modification, review, cleanup, and compliance validation.
• Automate security policy deployment and enforcement across multi-vendor firewall platforms (Palo Alto, Cisco ASA, Checkpoint, Fortinet) using APIs, SDKs, and infrastructure-as-code tooling.
• Strong understanding of current security threats, techniques, and the threat landscape; self-driven desire to research current and emerging threats.
• Conceptual and practical understanding of IT Infrastructure designs, technologies, products, and services, including applicable Information Security concepts.
• Ability to work both in a group setting and independently.
• Experience with IT ticketing systems.
• Strong working knowledge of Network Security concepts and technologies: Building and maintaining network security devices for WAN, LAN, VPN, and WiFi.
• Intrusion detection and prevention systems (IDS/IPS).
• TCP/IP, computer networking, routing, and switching protocols.
• DNS, Internet policy enforcement, web content filtering.

Preferred Certifications

• Palo Alto Networks (PCNSE)
• Cisco ASA / CCNP Security
• Checkpoint (CCSE)
• Zscaler certified Professional
• Certified Information Systems Security Professional (CISSP)
• SANS GIAC certifications (GCIA, GCFW, GPEN, or similar)
• AWS/Azure/GCP Security Specialty (cloud security automation)
• Palo Alto XSOAR Engineer or similar SOAR platform certification