Network Security SME

Zensar Technologies; Pune District; Presencial; INR 2 600 000 - 3 800 000; Tempo integral

Resumo da oferta

Zensar Technologies in Pune is seeking an experienced Network Security SME to design, implement, secure, and support complex enterprise networks while serving as a Tier-3 escalation point for critical incidents and architectural initiatives.

The ideal candidate will expert in Palo Alto, Fortinet FortiGate, F5 BIG-IP, SD-WAN, Infoblox DDI, and Cisco Routing & Switching, with hands-on firewall and DDI administration experience.

Qualificações

• 8+ years of enterprise network and network security experience.
• Strong architectural and troubleshooting expertise across security, routing, switching, load balancing and SD-WAN.
• Excellent stakeholder communication and incident management skills.
• Comfortable working in US business hours and supporting production environments.

Responsabilidades

• Install, configure, and maintain Palo Alto PA-Series and Fortinet FortiGate firewalls.
• Design, implement, and audit firewall policies, NAT rules, security profiles, and access controls.
• Manage enterprise firewall environments using Palo Alto Panorama and FortiManager/FortiAnalyzer.
• Configure Site-to-Site IPSec VPNs and Remote Access VPNs (GlobalProtect and FortiClient).
• Implement IPS/IDS, URL Filtering, Anti-Malware, Application Control, and Threat Prevention.
• Perform firmware upgrades, vulnerability remediation, patching, and lifecycle management.
• Maintain HA environments including Active/Passive and Active/Active deployments.
• Monitor security events and firewall logs; troubleshoot incidents and provide RCA.
• Support automation initiatives for IP allocation, DNS management; design SD-WAN or Prisma SD-WAN deployments.
• Configure and manage F5 BIG-IP LTM and Infoblox DDI; ensure high availability and performance.

Ferramentas

Palo Alto PA-Series

Fortinet FortiGate

F5 BIG-IP LTM

Infoblox DNS/DHCP/IPAM

SD-WAN

Cisco Routing & Switching

Wireshark / tcpdump

FortiManager/FortiAnalyzer

Descrição da oferta de emprego

Shift: Core US Shift (9:00 AM - 6:00 PM EST) with occasional night shift coverage (India daytime)

Experience: 8+ Years

Job Summary

We are seeking an experienced Network Security SME with strong expertise in Palo Alto, Fortinet, F5 Load Balancers, SD-WAN, Infoblox DDI, and Cisco Routing & Switching. The ideal candidate will be responsible for designing, implementing, securing, and supporting complex enterprise network security environments while serving as a Tier-3 escalation point for critical incidents and architectural initiatives.

Key Responsibilities

Firewall Administration & Architecture

• Install, configure, and maintain Palo Alto PA-Series and Fortinet FortiGate firewalls.
• Design, implement, and audit firewall security policies, NAT rules, security profiles, and access controls.
• Manage enterprise firewall environments using Palo Alto Panorama and FortiManager/FortiAnalyzer.
• Configure and support Site-to-Site IPsec VPNs and Remote Access VPNs (GlobalProtect and FortiClient).
• Implement advanced security features including IPS/IDS, URL Filtering, Anti-Malware, Application Control, and Threat Prevention.
• Perform firmware upgrades, vulnerability remediation, patching, and lifecycle management.
• Maintain High Availability (HA) environments including Active/Passive and Active/Active deployments.

Network Security Operations

• Monitor security events and firewall logs to identify threats, anomalies, and unauthorized activity.
• Conduct proactive security assessments and recommend network hardening measures.
• Troubleshoot security incidents and provide root cause analysis (RCA).
• Ensure network security compliance and operational excellence.

Traffic Management & Core Network Services (DDI)

• Configure and manage F5 BIG-IP LTM including VIPs, Pools, Monitors, SSL Offloading, and iRules.
• Administer Infoblox Grid Manager for DNS, DHCP, and IP Address Management (IPAM).
• Maintain high-availability DDI infrastructure and optimize network service delivery.
• Support automation initiatives for IP allocation, DNS management, and operational efficiency.
• Design, deploy, and optimize Fortinet Secure SD-WAN or Palo Alto Prisma SD-WAN environments.
• Implement application-aware routing and traffic steering for business-critical applications.
• Support hybrid connectivity solutions across on-premises, cloud, and branch locations.
• Manage secure VPN overlays and WAN optimization initiatives.

Cisco Routing & Switching

• Strong hands-on experience with Cisco Routing & Switching technologies.
• Troubleshoot Layer 2 and Layer 3 connectivity issues across enterprise networks.
• Configure and support VLANs, STP, OSPF, BGP, EIGRP, HSRP, VRRP, and routing policies.
• Work closely with security and infrastructure teams to ensure network availability and performance.

Troubleshooting & Support

• Act as a Tier 2/Tier 3 escalation engineer for complex network and security incidents.
• Perform detailed packet analysis using Wireshark, tcpdump, and firewall packet captures.
• Troubleshoot multi-vendor environments involving F5, Firewalls, SD-WAN, DNS/DHCP, and Cisco networks.
• Monitor firewall performance metrics including CPU, memory, session utilization, and throughput.
• Drive performance tuning and continuous service improvements.

Mandatory Skills

• Fortinet FortiGate
• Site-to-Site VPN & Remote Access VPN
• F5 BIG-IP LTM
• Infoblox DNS, DHCP & IPAM
• SD-WAN (Fortinet Secure SD-WAN or Prisma SD-WAN)
• Cisco Routing & Switching
• Wireshark / tcpdump Packet Analysis
• Network Security Operations & Incident Management
• High Availability (HA) Firewall Deployments

Preferred Skills

• Network Automation
• Security Compliance & Governance
• Scripting using Python or Ansible

Ideal Candidate Profile

• 8+ years of enterprise network and network security experience.
• Strong architectural and troubleshooting expertise across security, routing, switching, load balancing, and SD-WAN.
• Excellent stakeholder communication and incident management skills.
• Comfortable working in US business hours and supporting critical production environments.