Network Firewall Engineer

Role

Years of Experience

Location

• Strong knowledge in Firewalls like Cisco ASA, Checkpoint, Palo Alto, & Fortinet (Forti Manager & Forti Analyzer) firewalls in High-availability mode.
• Understanding of SSL, TCP/UDP, HTTP, FTP/SFTP, NTP, Telnet, NFS, SSH, LDAP, etc.
• VPN concepts like GRE Tunnel, IPSEC VPNs, SSL & DMVPN.
• Blue Coat/McAfee Proxy, Multifactor Authentication, IPS, IDS
• Good understanding on Switching & Routing concepts
• Level 2/3 Network Security Engineer
• Play a Subject Matter Expert (SME) role on network security technologies
• Deep and strong understanding of firewall (Layer-2 and Layer-3), Internet proxy, DNS, SSL VPN, multi-factor authentication and IPS technologies.
• Ability to implement and support complex security architectures involving but not limited to the above listed technologies.
• Strong experience on Palo Alto Network firewalls
• Very strong hands-on experience on implementation and advanced troubleshooting in Cisco ASA, Checkpoint, Palo Alto, & Fortinet (Forti Manager & Forti Analyzer) firewalls in High-availability mode.
• Maintaining various firewalls, virtual private networks, web protocols, and email security.
• Extensive exposure on Blue Coat, McAfee proxies involving complex traffic troubleshooting.
• Understanding of commonly used protocols and services (e.g. SSL, TCP/UDP, HTTP, FTP/SFTP, NTP, Telnet, NFS, SSH, LDAP, etc.)
• Good understanding of routing technologies including OSPF, BGP, GRE Tunnel and IPSEC VPNs with the ability to design and troubleshoot complex enterprise network infrastructure.
• Good understanding of Remote Access products with 2-factor authentication systems.
• Good conceptual understandings of Switching & F5 load balancers.
• Expertise on packet capturing and deep packet analysis
• Experience working on process-oriented organizations involving incident, change, problem and configuration management process.
• Ability to analyze problems and perform Root Cause Analyses as and when required.
• Leading the projects
• Project reviews, project meetings and project delivery, Leading Technology upgrade programs
• Candidate need to have Level 2/3 experience with Firewall Setup and support in enterprise/large corporate environment in current or most recent position
• Cisco (CCNP Security) or Checkpoint (CCSE) or Palo Alto (PCNSE) Security Certifications
• ITIL Foundation
• Serve as primary support for security environment by managing customer devices and end-to-end security services, identifying sources of problems, and resolving configuration issues.
• Deep understanding of Firewall technologies.
• Configuring and installing security infrastructure devices.
• Reporting the security analysis and monitoring findings.
• Using industry-standard analysis criteria to test the security level of the firm.
• Responsible to identify threats, vulnerabilities etc. & take appropriate actions
• Consults about network performance, throughput, protocols, network security, and infrastructure technology changes.
• Defining and maintaining security policies.
• Occasionally replacing the security system protocol and architecture