GMS-Senior-Firewall and VPN Management

Ernst & Young Advisory Services Sdn Bhd; Bengaluru; On-site; INR 2,400,000 - 3,600,000; Full time

Job summary

EY in Bengaluru is seeking a Senior Network Security Engineer to lead the end-to-end lifecycle of firewall and VPN infrastructure. The role is hands-on and spans Assess, Build, Transition, and Operations, requiring deep enterprise security expertise and a Zero Trust mindset.

You will implement NGFWs, IPsec/SSL VPNs, perform threat protection configuration, and drive secure baselines with documentation, UAT, and knowledge transfer to operations teams.

Qualifications

• 5–6 years of dedicated experience in network security engineering and operations.
• Deep, hands-on expertise with leading NGFW platforms (e.g., Palo Alto Networks, Fortinet, Check Point, or Cisco Firepower).
• Strong proficiency in configuring, troubleshooting, and scaling IPsec, SSL VPN, GRE, and SD‑WAN integrations.
• Advanced understanding of routing protocols (BGP, OSPF), NAT, VLANs, and TCP/IP fundamentals.
• Proven experience working through structured Assess, Build, Migrate, and Run phases in complex enterprise environments.
• Industry‑recognized vendor certifications (PCNSE, NSE 4/7, CCSE) are highly preferred. Foundational security certifications (CISSP, CCSP, or SSCP) are a strong plus.

Responsibilities

• Assess security posture, firewall rules, and VPN architectures; identify gaps.
• Deploy NGFWs and VPN gateways; implement site-to-site and remote-access VPNs.
• Plan migrations with zero downtime; create SOPs and topology docs.
• Operate and monitor firewall/VPN, manage patches and compliance.

Skills

5–6 years experience

Palo Alto Networks

Fortinet

Check Point

Cisco Firepower

IPsec VPN

SSL VPN

GRE

SD-WAN

BGP

OSPF

NAT

VLANs

TCP/IP

Assess Build Migrate Run

PCNSE

NSE 4/7

CCSE

CISSP

CCSP

SSCP

Documentation

Mentoring

Job description

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Senior Network Security Engineer (Firewall management including VPN Management)

Experience Level: 5–6 Years

We are seeking a Senior Network Security Engineer to lead and execute the end-to-end lifecycle of our firewall and VPN infrastructure. This role is highly hands‑on and spans the complete service delivery model: Assess, Build, Transition, and Operations. The ideal candidate will have deep technical expertise in enterprise infrastructure security, a strong understanding of Zero Trust principles, and the ability to maintain continuous security management with minimal disruption to business operations.

Key Responsibilities

Assess (Design & Architecture Review)

• Conduct comprehensive assessments of existing network security postures, firewall rulesets, and VPN architectures.
• Identify security gaps, vulnerabilities, and optimization opportunities in legacy environments.
• Collaborate with architecture teams to design scalable, high-availability (HA) firewall and VPN solutions tailored to enterprise requirements.
• Define and document rule‑base standardization, routing requirements, and integration points with existing SIEM and logging infrastructure.

Build (Implementation & Deployment)

• Deploy and configure Next‑Generation Firewalls (NGFW) and VPN gateways from the ground up.
• Implement site‑to‑site (IPsec) and remote‑access (SSL/TLS) VPN solutions, ensuring secure and seamless connectivity.
• Configure advanced threat protection features, including IPS/IDS, web filtering, and application control.
• Establish secure baseline configurations and implement segmentation aligned with Zero Trust Architecture.

Transition (Cutover & Handover)

• Plan and execute complex firewall migrations and VPN cutovers with zero‑to‑minimal downtime.
• Develop robust rollback plans and execute User Acceptance Testing (UAT) prior to go‑live.
• Produce comprehensive "As-Built" documentation, standard operating procedures (SOPs), and topology diagrams.
• Conduct knowledge transfer sessions to align support teams on the newly deployed architecture.

Operations & Continuous Management

• Serve as the senior technical escalation point for complex firewall and VPN incidents.
• Perform continuous firewall rule lifecycle management (rule recertification, unused rule cleanup, and optimization).
• Manage firmware upgrades, patch management, and vulnerability remediations for security appliances.
• Monitor VPN performance, tunnel stability, and firewall throughput, proactively addressing capacity constraints.
• Ensure continuous compliance with industry security frameworks and internal governance standards.
• Understanding of ITIL‑based Change Management, managing end‑to‑end change lifecycle activities, CAB coordination, and compliant implementation of infrastructure and application changes.

Required Skills & Qualifications

• Experience: 5–6 years of dedicated experience in network security engineering and operations.
• Core Technologies: Deep, hands‑on expertise with leading NGFW platforms (e.g., Palo Alto Networks, Fortinet, Check Point, or Cisco Firepower).
• VPN Mastery: Strong proficiency in configuring, troubleshooting, and scaling IPsec, SSL VPN, GRE, and SD‑WAN integrations.
• Networking Foundations: Advanced understanding of routing protocols (BGP, OSPF), NAT, VLANs, and TCP/IP fundamentals.
• Enterprise Methodologies: Proven experience working through structured Assess, Build, Migrate, and Run phases in complex enterprise environments.
• Certifications: Industry‑recognized vendor certifications (e.g., PCNSE, NSE 4/7, CCSE) are highly preferred. Foundational security certifications (CISSP, CCSP, or SSCP) are a strong plus.
• Soft Skills: Strong analytical problem‑solving skills, ability to mentor junior analysts, and excellent documentation practices.

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.