Network Security Lead Engineer

Theomnihire; Chennai District; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Theomnihire in Chennai, India is seeking a Network Security Engineer to support firewalls, VPN, and cloud security services across regional and global operations.

You will configure and upgrade firewall policies, analyze security requirements from IT teams, and help strengthen the enterprise's security posture across data centers, cloud, and remote locations.

Qualifications

• Level 2-3 support of firewall technologies including Fortinet firewalls, Palo Alto Firewalls, Azure native firewalls, AWS native firewalls & other next-gen firewalls.
• Hands-on experience on centralized management of firewalls through Panorama, Forti-Manager etc.
• Hands-on experience of configuring firewalls into SDWAN networks.
• Working knowledge on handling security related issues on cloud environments primarily on Azure, AWS.
• Must have experience handling Zscaler web proxy environment.
• Must have experience handling Cloud networking environment on Azure, AWS (NSG, Application Gateway, Load Balancer, Peering).
• Experience in handling and troubleshooting Client to site VPN environments.
• Experience analyzing and implementing complex firewall rules on FortiGate, Palo Alto, AWS & Azure native Firewalls.
• Ability to analyze network traffic flows to reverse-engineer required firewall ports and rules.

Responsibilities

• Support firewalls and other network security components in the Olam environment across regions and countries.
• Assist in setup, upgrade and migration of firewalls, VPN, and web proxies.
• Analyze new requirements from IT teams and provide secure solutions to meet business needs while maintaining security posture.
• Identify opportunities to strengthen network security posture in data centers, regions, and cloud.

Skills

Firewall administration

SD-WAN networks

Cloud networking

VPN

Zscaler proxy

Network traffic analysis

MPLS/VPN

Tools

Panorama

FortiManager

Azure Firewall

AWS Firewall

Job description

• Overall, the job requires supporting the firewalls and other network security components in the Olam environment located across various regions and countries.


• Supporting the setup, upgrade and migration of firewalls, VPN, web proxies etc.


• Analyze the new requirements based on input from various IT teams and provide solutions to meet the business requirements while maintaining the security posture of the enterprise.


• Identify opportunities for strengthening network security posture in the datacenter, regions, and cloud.

Skills and Qualifications:

• Level 2-3 support of firewall technologies includes Fortinet firewalls, Palo Alto Firewalls, Azure native firewalls, AWS native firewalls & other next- gen firewalls.


• Hands-on experience on centralized management of firewalls through Panorama, Forti-Manager etc.,


• Hands-on experience of configuring firewalls into SDWAN networks


• Working knowledge on handling security related issues on cloud environments primarily on Azure, AWS, etc.,


• Must have experience on handling Zscaler web proxy environment.


• Must have experience on handling Cloud networking environment either on Azure, AWS handling on NSG, Application Gateway, Load Balancer, Peering etc.


• Must have experience in handling and troubleshooting Client to site VPN environment.


• Must have experience analyzing and implementing complex firewall rules on security devices (FortiGate, Palo Alto, AWS & Azure native Firewalls).


• Demonstrated ability to analyze network traffic flows to reverse-engineer the required firewall ports and rules to allow secure access of applications


• Strong technical ability to troubleshoot firewall problems in a large enterprise involving complex network application flows between multiple hosts spanning multiple firewalls/security zones and different geographic locations


• A comprehensive knowledge of IP networking and network security including Intrusion Detection, DMZ, encryption, IPsec, SSL VPNs, MPLS/VPN, Site to Site VPN tunnels, SSL/VPN, proxy services etc.


• Must have strong analytical and problem-solving skills and a solid understanding of how to troubleshoot connectivity and performance issues that involve firewalls, SDWAN, MPLS network connectivity and applications


• Must have experience on handling NAC (Network Access/Admission Control).


• Other security components are value added like DNS security, MFA etc.,


• Good hands‑on experience in creating network diagrams, Network architecture diagram, Schematic diagrams in using MS Visio.


• Able to support on night shifts based on client requirements.