Network Security Engineer I

Kroll; Mumbai; Hybrid; INR 1,800,000 - 2,800,000; Full time

Benefits offered by this job

Hybrid work model

Career development

Health insurance

Job summary

Kroll seeks a Network Security Engineer I to design, implement, and manage enterprise firewall and network security platforms. You will work with infrastructure, cloud, and application teams to protect critical systems in a hybrid environment.

The role requires hands-on firewall experience, familiarity with Palo Alto, Fortinet, Cisco Firepower/ASA, or Check Point, and strong knowledge of TCP/IP and VPN technologies. Collaboration and continuous improvement are key.

Qualifications

• Bachelor's degree in IT, Cybersecurity, CS or related field.
• 5+ years of experience administering enterprise firewall and network security environments.
• Hands-on experience with leading firewall platforms (Palo Alto, Fortinet, Cisco Firepower/ASA, Check Point).
• Strong knowledge of TCP/IP, routing, switching, DNS, DHCP, VPN technologies, NAT, and network architecture.
• Experience managing firewall policies in large-scale enterprise environments.
• Understanding of cybersecurity principles, network security controls, and threat mitigation.
• Experience with security monitoring and logging tools.
• Excellent troubleshooting, analytical, and problem-solving skills.
• Strong written and verbal communication skills.

Responsibilities

• Configure, administer, and maintain enterprise firewall platforms including Palo Alto, Cisco Firepower/ASA, or equivalent technologies.
• Manage firewall policies, security zones, NAT rules, VPN configurations, and access control.
• Review, approve, and implement firewall change requests per security standards and change management procedures.
• Monitor firewall performance, capacity, and security events for optimal operation.
• Implement and maintain network segmentation, micro-segmentation, and Zero Trust security principles.
• Investigate suspicious network activity and collaborate with InfoSec on threat detection and incident response.
• Partner with network, server, cloud, and application teams to design secure solutions.
• Support hybrid and cloud-based security architectures across AWS, Azure, and Google Cloud.
• Assist with security assessments, penetration testing, and remediation efforts.
• Lead troubleshooting on firewall, VPN, routing, and network security technologies.

Skills

Palo Alto Firewall

Fortinet

Cisco Firepower/ASA

Check Point

TCP/IP networking

VPN technologies

Threat monitoring

Policy management

Zero Trust

Security incident response

Education

Bachelor's degree in IT/Cybersecurity/CS

Tools

PowerShell

Python

REST APIs

SIEM

Cloud security tools

Job description

Network Security Engineer I

We are seeking a highly skilled and motivated Firewall Administrator to join our Infrastructure and Network teams. This role is responsible for the design, implementation, administration, monitoring, and continuous improvement of enterprise firewall and network security platforms. The ideal candidate will have extensive experience managing complex network environments, implementing security best practices, and partnering with infrastructure, cloud, and application teams to protect critical business systems. This is a hybrid role and work hours are 2pm – 11pm IST and 6:30pm – 3:30pm IST.

Responsibilities:

• Configure, administer, and maintain enterprise firewall platforms including Palo Alto, Cisco Firepower/ASA, or equivalent technologies.
• Manage firewall policies, security zones, NAT rules, VPN configurations, and access control.
• Review, approve, and implement firewall change requests in accordance with established security standards and change management procedures.
• Monitor firewall performance, capacity, and security events to ensure optimal operation.
• Conduct regular rule reviews and policy optimization to improve security posture and operational efficiency.
• Implement and maintain network segmentation, micro-segmentation, and Zero Trust security principles.
• Investigate suspicious network activity and collaborate with InfoSec teams on threat detection and incident response activities.
• Analyze security alerts, logs, and network traffic to identify vulnerabilities, threats, and anomalies.
• Partner with network, server, cloud, and application teams to design secure solutions for business initiatives.
• Support hybrid and cloud-based security architectures across AWS, Microsoft Azure, and Google Cloud environments.
• Assist with security assessments, penetration testing activities, and remediation efforts.
• Participate in infrastructure projects involving mergers, acquisitions, migrations, and network modernization initiatives.
• Ensure compliance with security policies, industry standards, and regulatory requirements.
• Develop and maintain network security documentation, diagrams, operational procedures, and configuration standards.
• Support internal and external audits by providing evidence, reports, and technical expertise.
• Recommend improvements to security controls, processes, and technologies.
• Participate in on-call support rotations and provide timely resolution of critical incidents.
• Perform root cause analysis for security and connectivity issues.
• Lead troubleshooting efforts involving firewall, VPN, routing, and network security technologies.

Essential traits:

• Bachelors degree in information technology, Cybersecurity, Computer Science, Engineering, or a related discipline; equivalent work experience will be considered.
• 5+ years of experience administering enterprise firewall and network security environments.
• Hands‑on experience with one or more leading firewall platforms including Palo Alto Networks, Fortinet, Cisco Firepower/ASA, or Check Point.
• Strong knowledge of TCP/IP, routing protocols, switching, DNS, DHCP, VPN technologies, NAT, and network architecture.
• Experience managing firewall policies in large‑scale enterprise environments.
• Strong understanding of cybersecurity principles, network security controls, and threat mitigation strategies.
• Experience with security monitoring and logging tools.
• Excellent troubleshooting, analytical, and problem‑solving skills.
• Strong written and verbal communication skills.

Preferred Qualifications and Competencies

• Professional certifications such as:
  • Palo Alto PCNSA or PCNSE
  • CCNP Security
  • CISSP or Security+
• Experience with cloud‑native security services and security automation.
• Familiarity with scripting or automation using PowerShell, Python, or REST APIs.
• Experience working in regulated industries or highly available enterprise environments.
• Strong attention to detail and commitment to operational excellence.
• Ability to manage multiple priorities in a fast‑paced environment.
• Collaborative mindset with the ability to work effectively across technical and business teams.
• Proactive approach to identifying and mitigating security risks.
• Commitment to continuous learning and professional development.

About Kroll

In a world of disruption and increasingly complex business challenges, our professionals bring truth into focus with the Kroll Lens. Our sharp analytical skills, paired with the latest technology, allow us to give our clients clarity—not just answering all areas of business. We value the diverse backgrounds and perspectives that enable us to think globally. As part of One team, One Kroll, you will contribute to a supportive and collaborative work environment that empowers you to excel.

Kroll is the premier global valuation and corporate finance advisor with expertise in complex valuation, disputes and investigations, M&A, restructuring, and compliance and regulatory consulting. Our professionals balance analytical skills, deep market insight and independence to help our clients make sound decisions. As an organization, we think globally—and encourage our people to do the same.

Kroll is committed to equal opportunity and diversity, and recruits people based on merit.

In order to be considered for a position, you must formally apply via careers.kroll.com.

#LI-JC1

#LI-Hybrid

Requirements: