Network Security Lead Engineer

TOCUMULUS; Chennai District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

TOCUMULUS is seeking a network security professional to support firewall infrastructure across regions. You will help with setup, upgrades, migrations of firewalls, VPNs, and web proxies while maintaining enterprise security posture.

You will analyze requirements from IT teams, implement secure firewall rules, and strengthen security across data centers, cloud, and multi-region networks. Night shift readiness may be required based on client needs.

Qualifications

• Experience with Fortinet, Palo Alto, Azure and AWS firewalls.
• Ability to manage centralized firewall platforms like Panorama and FortiManager.
• Experience configuring firewalls in SD-WAN environments.
• Security-focused work with cloud networking in Azure and AWS.

Responsibilities

• Support Firewall, VPN, web proxy setup, upgrades and migrations.
• Analyze and implement firewall rules to meet business requirements.
• Troubleshoot firewall issues across multi-region, multi-geo environments.
• Strengthen security posture in data center, regions and cloud.

Skills

Fortinet firewalls

Palo Alto Firewalls

Azure native firewalls

AWS native firewalls

Zscaler web proxy

SDWAN networks

Panorama

Forti-Manager

Cloud networking (Azure/AWS)

VPN: Client-to-site

Firewall rules analysis

Intrusion Detection

DMZ

SSL VPNs

IPsec

NAC (Network Access Control)

Tools

Panorama

Forti-Manager

Job description

Requirements

Responsibilities

• Overall, the job requires supporting the firewalls and other network security components in the Olam environment located across various regions and countries.
• Supporting the setup, upgrade and migration of firewalls, VPN, web proxies etc.
• Analyze the new requirements based on input from various IT teams and provide solutions to meet the business requirements while maintaining the security posture of the enterprise.
• Identify opportunities for strengthening network security posture in the datacenter, regions, and cloud.

Skills and Qualifications

• Level 2-3 support of firewall technologies includes Fortinet firewalls, Palo Alto Firewalls, Azure native firewalls, AWS native firewalls & other next- gen firewalls.
• Hands-on experience on centralized management of firewalls through Panorama, Forti-Manager etc.,
• Hands-on experience of configuring firewalls into SDWAN networks
• Working knowledge on handling security related issues on cloud environments primarily on Azure, AWS, etc.,
• Must have experience on handling Zscaler web proxy environment.
• Must have experience on handling Cloud networking environment either on Azure, AWS handling on NSG, Application Gateway, Load Balancer, Peering etc.
• Must have experience in handling and troubleshooting Client to site VPN environment.
• Must have experience analyzing and implementing complex firewall rules on security devices (FortiGate, Palo Alto, AWS & Azure native Firewalls).
• Demonstrated ability to analyze network traffic flows to reverse-engineer the required firewall ports and rules to allow secure access of applications
• Strong technical ability to troubleshoot firewall problems in a large enterprise involving complex network application flows between multiple hosts spanning multiple firewalls/security zones and different geographic locations
• A comprehensive knowledge of IP networking and network security including Intrusion Detection, DMZ, encryption, IPsec, SSL VPNs, MPLS/VPN, Site to Site VPN tunnels, SSL/VPN, proxy services etc.
• Must have strong analytical and problem-solving skills and a solid understanding of how to troubleshoot connectivity and performance issues that involve firewalls, SDWAN, MPLS network connectivity and applications
• Must have experience on handling NAC (Network Access/Admission Control).
• Other security components are value added like DNS security, MFA etc.,
• Good hands-on experience in creating network diagrams, Network architecture diagram, Schematic diagrams in using MS Visio.
• Able to support on night shifts based on client requirements.