Opening for Network Security L2(Fortinet) @ Pune/Chennai

Quess IT Solutions; Pune District; In loco; INR 1.200.000 - 2.100.000; Tempo pieno

Descrizione del lavoro

Quess IT Solutions is seeking a Network Security Engineer in Pune to deploy and manage FortiGate and other security appliances. You will design firewall policies, VPNs, and secure SD-WAN to support enterprise needs.

Responsibilities include monitoring security events, troubleshooting incidents, and maintaining secure, compliant infrastructure. Collaboration with SOC and network teams is essential.

Competenze

• Experience deploying and configuring enterprise security appliances.
• Ability to design and optimize firewall policies, NAT, and security profiles.
• Experience configuring site-to-site IPsec and remote-access VPNs.
• Experience with SD-WAN technologies and HA clusters.
• Proficiency in monitoring security events and incident response.

Mansioni

• Deploy, configure, and optimize Palo Alto, Cisco, Fortinet security appliances and virtual solutions.
• Design and implement firewall policies, routing, NAT, and security profiles.
• Configure site-to-site IPsec VPNs and secure remote-access VPNs.
• Deploy Fortinet Secure SD-WAN across distributed environments.
• Maintain high availability through HA clusters and redundancy.

Conoscenze

Firewall configuration

VPN management

Network security architecture

HA clustering

Security monitoring

Strumenti

Palo Alto

Cisco

Fortinet FortiGate

FortiAnalyzer

FortiSIEM

Fortinet Secure SD-WAN

Descrizione del lavoro

The Network Security Engineer is responsible for the deployment, configuration, administration, and ongoing optimization of FortiGate firewall infrastructure. The role focuses on ensuring high availability, maintaining robust security controls, implementing architectural enhancements, troubleshooting complex issues, and supporting business and customer security requirements.

Core Responsibilities

Infrastructure & Security Architecture

• Deployment & Configuration: Install, configure, test, and maintain Palo Alto, Cisco, Fortinet security appliances, software, and virtual solutions.
• Firewall Policy Management: Design, implement, and optimize firewall policies, routing, NAT, and security profiles in line with security requirements and best practices.
• VPN Management: Configure and manage site-to-site IPsec VPNs and secure remote-access VPN solutions.
• Secure SD-WAN: Deploy, manage, and optimize Fortinet Secure SD-WAN solutions across distributed enterprise environments.
• High Availability: Configure and maintain HA clusters, redundancy, and failover mechanisms to ensure service continuity.

Operations & Incident Response

• Security Monitoring: Monitor network traffic, security events, and alerts using FortiAnalyzer, FortiSIEM, and related security tools.
• Troubleshooting & Incident Management: Diagnose and resolve complex L2/L3 network and security incidents, including routing, connectivity, performance, and policy-related issues.
• Lifecycle Management: Develop and execute Methods of Procedure (MOPs) for firmware upgrades, security patching, configuration changes, and infrastructure maintenance.
• Performance Optimization: Analyze firewall utilization, traffic patterns, and security logs to improve performance, availability, and operational efficiency.
• Configuration & Compliance: Maintain configuration backups, technical documentation, change records, and compliance with security standards and operational policies.
• Customer Engagement: Gather business and technical requirements and translate them into secure, scalable Fortinet-based network architectures.
• Technical Support: Collaborate with network, infrastructure, SOC, and other engineering teams to resolve technical issues and deliver end-to-end solutions.
• Knowledge Transfer: Provide technical training and knowledge-sharing sessions for customer operations teams and internal L1/L2 engineers.
• Documentation & Reporting: Prepare implementation plans, network diagrams, operational procedures, incident reports, and technical recommendations.
• Continuous Improvement: Identify opportunities to strengthen security controls, streamline operations, and improve infrastructure resilience.