Network Security Engineer / Firewall Security Engineer

Simpsoft Solutions; Dadri, Bengaluru; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

Simpsoft Solutions is seeking a Network Security Engineer to lead advanced firewall security initiatives across multi-vendor platforms, including Palo Alto, Cisco ASA, Check Point, and Fortinet.

You will design and implement security architectures, automate policy lifecycles, perform audits, and collaborate with IT and business teams to strengthen the enterprise's threat defenses.

Qualifications

• 10-15 years of experience in security processes and solutions.
• Detailed technical experience in installation, configuration, and operation of high-end firewall appliances.
• Strong understanding of core Internet protocols, TCP/IP, computer networking, routing, and switching protocols.
• Experience with Cisco Routers, Switches, AAA, and TACACS.
• Research, evaluate, develop, and implement security solutions and standards following industry best practices.
• Work with other teams to design, develop, and implement Enterprise Security solutions in support of development, test, and production environments.

Responsibilities

• Design, develop, and implement Enterprise Security solutions in support of development, test, and production environments.
• Provide technical security expertise and assistance to IT and business groups.
• Perform security audits and testing; evaluate system security configurations to ensure efficacy and compliance with policies and procedures.
• Automate security policy deployment and enforcement across multi-vendor firewall platforms using APIs, SDKs, and infrastructure-as-code tooling.
• Strong understanding of current security threats and the threat landscape; research emerging threats.
• Ability to work both in a group setting and independently.

Skills

Security processes

Firewall policy management

Palo Alto Networks

Cisco ASA/CCNP Security

Check Point

Fortinet

Network security concepts

IDS/IPS

Automation frameworks

APIs & IaC tooling

Tools

Palo Alto Networks

Cisco ASA

Check Point

Fortinet

Zscaler

AWS/Azure/GCP Security

Job description

Network Security Engineer / Firewall Security Engineer

Key Deliverables and Responsibilities (Mandatory)

• 10- 15 years of experience with security processes and solutions.
• Detailed technical experience in the installation, configuration, and operation of high-end firewall appliances, ideally Palo Alto Networks, cisco FTD, checkpoint, Zscaler and fortinet products.
• Strong understanding of core Internet protocols, TCP/IP, computer networking, routing, and switching protocols, Network packet inspection and forensics.
• Experience with Cisco Routers, Switches, AAA, and TACACS.
• Research, evaluate, develop, and implement security solutions and standards following industry best practices.
• Work with other teams to design, develop, and implement Enterprise Security solutions in support of development, test, and production environments.
• Provide technical security expertise and assistance to other IT and business groups.
• Perform security audits and testing; evaluate system security configurations to ensure efficacy and compliance with policies and procedures.
• Design, develop, and maintain automation frameworks for firewall policy life cycle management including rule creation, modification, review, cleanup, and compliance validation.
• Automate security policy deployment and enforcement across multi-vendor firewall platforms (Palo Alto, Cisco ASA, Checkpoint, Fortinet) using APIs, SDKs, and infrastructure-as-code tooling.
• Strong understanding of current security threats, techniques, and the threat landscape; self-driven desire to research current and emerging threats.
• Conceptual and practical understanding of IT Infrastructure designs, technologies, products, and services, including applicable Information Security concepts.
• Ability to work both in a group setting and independently.
• Experience with IT ticketing systems.
• Strong working knowledge of Network Security concepts and technologies: Building and maintaining network security devices for WAN, LAN, VPN, and WiFi.
• Intrusion detection and prevention systems (IDS/IPS).
• TCP/IP, computer networking, routing and switching protocols.
• DNS, Internet policy enforcement, web content filtering.

Preferred Certifications

• Palo Alto Networks (PCNSE)
• Cisco ASA / CCNP Security
• Checkpoint (CCSE)
• Zscaler certified Professional
• Certified Information Systems Security Professional (CISSP)
• SANS GIAC certifications (GCIA, GCFW, GPEN, or similar)
• AWS/Azure/GCP Security Specialty (cloud security automation)
• Palo Alto XSOAR Engineer or similar SOAR platform certification