Network Security Lead

Location:

Shift hrs.:

Hiring Manager Notes:

Primary: Aruba, NAC (Aruba ClearPass certified will be preferred or should have sound expert level of knowledge on it with 6-8 years of exp.)

Secondary: Fortinet or any other Firewall, (Fortinet preferred), Zscaler.

Roles:

• Architect and design

  enterprise-wide NAC solutions using Aruba ClearPass.
• Lead the design and implementation of global Aruba ClearPass physical and virtual infrastructure.
• Define and enforce

  zero trust

  network access models and identity-based segmentation.
• Develop and implement

  802.1X, RADIUS/TACACS, and certificate-based authentication

  policies.
• Design secure onboarding flows for BYOD, guests, and corporate endpoints.
• Implement and maintain wired and wireless authentication, authorization, and accounting (AAA) policies and rulesets in accordance with organizational security requirements in retail, corporate, and CSC environments.
• Conduct regular audits and assessments of NAC configurations to ensure compliance with security policies and industrys best practices.
• Develop and enforce ZIA, ZPA and ZTNA policies for

  secure access to internet, SaaS, and internal applications

  .
• ZPA, Zscaler Internet Access Policy administration/management for SDWAN location Internet gateways.
• Design, deploy, and manage

  FortiGate firewalls

  in

  on-prem data centers

  and

  public cloud platforms

  (AWS, Azure, GCP).
• Secure cloud workloads using

  FortiGate-VM

  in

  AWS,

  Azure

  and

  GCP

  architectures.
• Implement

  high availability (HA)

  configurations,

  VPNs

  ,

  NAT

  ,

  IPS/IDS

  ,

  Application control, Web filter, SSL inspection

  , and

  deep packet inspection

  policies
• Upgrades/Hotfixes to be applied from time to time.
• Configure and manage

  Fortimanager and FortiAnalyzer

  for centralized logging, policy management, and compliance monitoring.
• Aruba Clearpass Policy Management and administration for NAC (Network access Control)
• Defining and generating reports on periodic basis to facilitate Information Security Posture dash-boarding.
• Device End-of-Life/End-of-Support planning.
• Attend P1/P2 troubleshooting calls for any of the responsibility areas

Create and maintain system documentation and standard operating procedures for administration