Job Overview
We are looking for an experienced Network Security Engineer to design, implement, monitor, and support enterprise security infrastructure across on-premises, cloud, and hybrid environments. The ideal candidate should possess strong expertise in next-generation firewalls, SIEM platforms, cloud security, Zero Trust architecture, and modern cybersecurity operations.
The role requires hands-on experience with technologies such as Fortinet, SonicWall, Palo Alto Networks, SIEM solutions, SASE, SD-WAN, endpoint security, and threat detection platforms.
Key Responsibilities
- Design, deploy, and manage enterprise network security solutions
-
Configure and administer Fortinet, SonicWall, and Palo Alto firewalls
-
Implement and maintain VPNs, IPS/IDS, web filtering, NAT, ACLs, and segmentation policies
-
Monitor security events using SIEM, XDR, and SOC monitoring platforms
-
Investigate security incidents, perform threat analysis, and support incident response activities
-
Manage firewall policies, security rules, and compliance controls
-
Implement Zero Trust Network Access (ZTNA) and identity-based security controls
-
Support cloud security initiatives across AWS, Azure, and hybrid infrastructure
-
Configure and support SD-WAN and Secure Access Service Edge (SASE) solutions
-
Conduct vulnerability assessments and remediation activities
-
Collaborate with infrastructure, cloud, and application teams to secure enterprise environments
-
Maintain security documentation, diagrams, SOPs, and audit records
-
Participate in on-call rotations and critical incident handling
Required Skills & Technologies
Firewall & Network Security
- Fortinet FortiGate
-
SonicWall
-
Palo Alto Networks
-
Check Point (preferred)
-
Cisco Firepower / ASA
-
VPN Technologies (IPSec / SSL VPN)
-
IDS/IPS
-
Web Application Firewall (WAF)
-
NAC (Network Access Control)
Modern Security Technologies
- Zero Trust Architecture (ZTA)
-
ZTNA (Zero Trust Network Access)
-
SASE (Secure Access Service Edge)
-
SD-WAN Security
-
SSE (Security Service Edge)
-
CASB (Cloud Access Security Broker)
-
Micro-segmentation
-
Secure Remote Access Solutions
SIEM, SOC & Threat Detection
Experience with one or more:
- Splunk
-
QRadar
-
Microsoft Sentinel
-
LogRhythm
-
ArcSight
-
Elastic SIEM
Knowledge of:
- SOC operations
-
Threat hunting
-
Log correlation
-
MITRE ATT&CK framework
-
Incident response
-
Threat intelligence integration
Cloud & Infrastructure Security
- AWS Security
-
Microsoft Azure Security
-
Hybrid cloud networking
-
Cloud firewall management
-
Security Groups / NSGs
-
Identity & Access Management (IAM)
Endpoint & Advanced Security
- EDR/XDR platforms
-
CrowdStrike
-
Microsoft Defender
-
SentinelOne
-
Endpoint hardening
-
DLP (Data Loss Prevention)
-
Email security solutions
Networking Fundamentals
Strong understanding of:
- TCP/IP
-
Routing & Switching
-
VLANs
-
BGP / OSPF
-
DNS / DHCP
-
Load Balancing
-
Network troubleshooting
Automation & Scripting (Preferred)
- Python
-
PowerShell
-
Bash scripting
-
Security automation
-
SOAR platforms
Preferred Certifications
- Fortinet NSE / FCP
-
Palo Alto PCNSA / PCNSE
-
CCNP Security
-
CISSP
-
CEH
-
CompTIA Security+
-
Microsoft SC Certifications
-
AWS Security Specialty
Education
Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field preferred.
Soft Skills
- Strong analytical and troubleshooting skills
-
Ability to work in high-pressure environments
-
Excellent communication and stakeholder management
-
Strong documentation and reporting abilities
-
Proactive mindset with focus on continuous improvement
