Network Firewall

Tata Consultancy Services; Hyderabad; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

Tata Consultancy Services in Hyderabad is seeking a Subject Matter Expert in network security to design, implement, and support complex security architectures. You will lead security projects, provide advanced troubleshooting for Palo Alto, Cisco ASA, Checkpoint, and Fortinet firewalls in HA mode, and resolve complex traffic issues with deep packet analysis.

The role requires strong hands-on firewall and VPN experience, routing protocol knowledge, and RCA capabilities.

Qualifications

• Strong hands-on experience with enterprise firewall setup and support.
• In-depth Palo Alto Networks firewall expertise.
• Experience with Cisco ASA, Checkpoint, Palo Alto and Fortinet in HA mode.
• Exposure to Blue Coat and McAfee proxies for complex traffic troubleshooting.
• Understanding of common protocols: SSL/TLS, TCP/UDP, HTTP, FTP/SFTP, NTP, SSH, LDAP.
• Knowledge of routing: OSPF, BGP, GRE, IPsec VPNs; design and troubleshoot complex networks.
• 2FA/MFA and remote access technologies understood.
• Experience with incident/change/problem/configuration management and RCA.
• Project leadership and delivery, with technology upgrade programs.
• Certifications: CCNP Security / CCSE / PCNSE.

Responsibilities

• Play SME role on network security technologies.
• Implement and support complex security architectures.
• Lead projects, conduct reviews and deliver technology upgrades.
• Troubleshoot enterprise firewalls and VPNs; perform root cause analysis.
• Maintain HA firewall environments and related security services.
• Analyze traffic with deep packet inspection to resolve issues.

Skills

Firewall

Palo Alto Networks

Cisco ASA

Checkpoint

Fortinet FortiGate

Blue Coat

McAfee proxies

SSL VPN

IPSec VPN

MFA / 2FA

Routing protocols

OSPF

BGP

GRE

Deep packet analysis

HA firewall deployment

Incident/Change/Configuration Mgmt

Project leadership

Tools

FortiManager

FortiAnalyzer

F5

Job description

• Play a Subject Matter Expert (SME) role on network security technologies
• Deep and strong understanding of firewall (Layer-2 and Layer-3), Internet proxy, DNS, SSL VPN, multi-factor authentication and IPS technologies.
• Ability to implement and support complex security architectures involving but not limited to the above listed technologies.
• Strong experience on Palo Alto Network firewalls
• Very strong hands-on experience on implementation and advanced troubleshooting in Cisco ASA, Checkpoint, Palo Alto, & Fortinet (Forti Manager & Forti Analyzer) firewalls in High-availability mode.
• Maintaining various firewalls, virtual private networks, web protocols, and email security.
• Extensive exposure on Blue Coat, McAfee proxies involving complex traffic troubleshooting.
• Understanding of commonly used protocols and services (e.g. SSL, TCP/UDP, HTTP, FTP/SFTP, NTP, Telnet, NFS, SSH, LDAP, etc.)
• Good understanding of routing technologies including OSPF, BGP, GRE Tunnel and IPSEC VPNs with the ability to design and troubleshoot complex enterprise network infrastructure.
• Good understanding of Remote Access products with 2-factor authentication systems.
• Good conceptual understandings of Switching & F5 load balancers.
• Expertise on packet capturing and deep packet analysis
• Experience working on process-oriented organizations involving incident, change, problem and configuration management process.
• Ability to analyze problems and perform Root Cause Analyses as and when required.
• Leading the projects
• Project reviews, project meetings and project delivery, Leading Technology upgrade programs
• Candidate need to have Level 2/3 experience with Firewall Setup and support in enterprise/large corporate environment in current or most recent position.
• Cisco (CCNP Security) or Checkpoint (CCSE) or Palo Alto (PCNSE) Security Certifications