Network Security Engineer / Firewall Security Engineer

Simpsoft Solutions; Dadri, Bengaluru; On-site; INR 2,500,000 - 4,200,000; Full time

Job summary

Simpsoft Solutions seeks a Network Security Engineer to lead security architecture and firewall management across complex environments. You will install, configure and operate high-end firewall appliances including Palo Alto, Cisco ASA, Checkpoint and Fortinet, while coordinating with IT and security teams to strengthen protection across the WAN, LAN, VPN and cloud boundaries.

You will automate policy deployment, perform security audits and stay ahead of threats with proactive research.

Qualifications

• 10-15 years of experience with security processes and solutions.
• Detailed technical experience in installation, configuration, and operation of high-end firewall appliances (Palo Alto Networks, Cisco FTD, Checkpoint, Zscaler and Fortinet).
• Strong understanding of core Internet protocols, TCP/IP, networking, routing and switching.
• Experience with Cisco Routers, Switches, AAA, and TACACS.
• Ability to design, develop and implement Enterprise Security solutions; work with multiple teams.

Responsibilities

• Install, configure and operate high-end firewall appliances.
• Automate firewall policy life cycle management across multi-vendor platforms using APIs and IaC tooling.
• Conduct security audits, evaluate configurations for policy compliance and efficacy.
• Research, evaluate, develop and implement security solutions and standards.

Job description

Network Security Engineer / Firewall Security Engineer

Key Deliverables and Responsibilities (Mandatory)

• 10- 15 years of experience with security processes and solutions.
• Detailed technical experience in the installation, configuration, and operation of high-end firewall appliances, ideally Palo Alto Networks, cisco FTD, checkpoint, Zscaler and fortinet products.
• Strong understanding of core Internet protocols, TCP/IP, computer networking, routing, and switching protocols, Network packet inspection and forensics.
• Experience with Cisco Routers, Switches, AAA, and TACACS.
• Research, evaluate, develop, and implement security solutions and standards following industry best practices.
• Work with other teams to design, develop, and implement Enterprise Security solutions in support of development, test, and production environments.
• Provide technical security expertise and assistance to other IT and business groups.
• Perform security audits and testing; evaluate system security configurations to ensure efficacy and compliance with policies and procedures.
• Design, develop, and maintain automation frameworks for firewall policy life cycle management including rule creation, modification, review, cleanup, and compliance validation.
• Automate security policy deployment and enforcement across multi-vendor firewall platforms (Palo Alto, Cisco ASA, Checkpoint, Fortinet) using APIs, SDKs, and infrastructure-as-code tooling.
• Strong understanding of current security threats, techniques, and the threat landscape; self-driven desire to research current and emerging threats.
• Conceptual and practical understanding of IT Infrastructure designs, technologies, products, and services, including applicable Information Security concepts.
• Ability to work both in a group setting and independently.
• Experience with IT ticketing systems.
• Strong working knowledge of Network Security concepts and technologies: Building and maintaining network security devices for WAN, LAN, VPN, and WiFi.
• Intrusion detection and prevention systems (IDS/IPS).
• TCP/IP, computer networking, routing, and switching protocols.
• DNS, Internet policy enforcement, web content filtering.

Preferred Certifications

• Palo Alto Networks (PCNSE)
• Cisco ASA / CCNP Security
• Checkpoint (CCSE)
• Zscaler certified Professional
• Certified Information Systems Security Professional (CISSP)
• SANS GIAC certifications (GCIA, GCFW, GPEN, or similar)
• AWS/Azure/GCP Security Specialty (cloud security automation)
• Palo Alto XSOAR Engineer or similar SOAR platform certification