Security Engineer

Central Data Systems pvt ltd; Bengaluru; On-site; INR 1,200,000 - 2,100,000; Full time

Job summary

Central Data Systems Pvt Ltd in Bengaluru is seeking a hands-on Security Engineer to support customer implementations and technical escalations. The role covers firewall, VPN, and authentication technologies, with exposure to Cisco Secure Firewall/FTD, Cisco ISE, Palo Alto and Fortinet platforms.

You will perform configuration, troubleshooting, incident resolution, change implementation, and documentation for enterprise network security environments, coordinating with customer IT teams and

Qualifications

• Bachelor’s degree or diploma in Computer Science, IT, Electronics, Telecommunications or a related field
• CCNA: Mandatory
• CCNP Security: Preferred
• Palo Alto certification: Preferred
• Fortinet FCA or FCP, Network Security: Preferred
• Cisco Certified Specialist, Network Security Firepower: An advantage, or practical ISE deployment and support experience

Responsibilities

• Perform firewall policy, NAT, VPN and security-profile changes on Cisco Secure Firewall/FTD, Palo Alto and Fortinet platforms.
• Support Cisco ISE deployments and operations, including AAA, RADIUS, TACACS+, authentication, authorisation and guest access.
• Troubleshoot site-to-site VPN, remote-access VPN, dual-ISP failover and firewall-policy issues.
• Coordinate with customer IT teams, ISPs, OEM TAC, internal L2/L3 engineers and the network team on incident resolution and escalations.
• Prepare and maintain HLD/LLD inputs, network and security diagrams, configuration backups, SOPs, MOPs, RCA documentation.
• Take part in rotational on-call support and planned maintenance activities.

Skills

Troubleshooting

Communication

Incident ownership

Security concepts

Education

Bachelors degree or diploma in CS/IT/electronics/telecommunications or related field

Tools

CCNA

CCNP Security

Palo Alto certification

Fortinet FCA/FCP

Cisco Specialist, Firepower

Cisco ISE certification

Job description

CDS is seeking a hands-on Security Engineer to support customer implementation and technical escalation requirements. The role needs working-level capability across network security technologies, with exposure to Cisco Secure Firewall/FTD, Cisco ISE, Palo Alto Networks and Fortinet platforms.

You will deliver configuration, troubleshooting, incident resolution, change implementation, documentation and customer support for enterprise network security environments.

Key responsibilities

• Perform firewall policy, NAT, VPN and security-profile changes on Cisco Secure Firewall/FTD, Palo Alto and Fortinet platforms.
• Support Cisco ISE deployments and operations, including AAA, RADIUS, TACACS+, authentication, authorisation, guest access and network-access policy troubleshooting.
• Troubleshoot site-to-site VPN, remote-access VPN, dual-ISP failover and firewall-policy issues.
• Configure and troubleshoot firewall rules and security policies on Cisco Meraki MX, where applicable.
• Assist with firewall migration, upgrade, implementation and security-hardening activities.
• Analyse security incidents using device logs, monitoring tools, packet captures and diagnostic commands, and provide clear technical findings and corrective actions.
• Execute approved changes in line with CDS change-management processes, and prepare implementation plans, test plans and rollback procedures.
• Coordinate with customer IT teams, ISPs, OEM TAC, internal L2/L3 engineers and the network team on incident resolution and escalations.
• Prepare and maintain HLD/LLD inputs, network and security diagrams, configuration backups, SOPs, MOPs, reports and RCA documentation.
• Support service reviews with security-posture, incident and improvement inputs.
• Take part in rotational on-call support and planned maintenance activities, as required.

Firewall and network security

• Cisco Secure Firewall / Firepower Threat Defense (FTD) and FMC exposure.
• Palo Alto firewall policy, NAT, zones, security profiles and VPN fundamentals.
• FortiGate firewall policy, NAT, IPsec VPN, SSL VPN, SD-WAN and UTM profile fundamentals.
• Firewall-rule review, security segmentation, access control and basic IPS/IDS concepts.
• Cisco ISE fundamentals: RADIUS/TACACS+, 802.1X, guest access, profiling and policy troubleshooting.

Foundational networking

• Working knowledge of TCP/IP, VLANs, routing fundamentals, NAT, DNS and DHCP as they relate to security configuration and troubleshooting.
• Familiarity with Cisco Catalyst switching and Cisco Meraki MX / SD-WAN security environments is an advantage.

Qualifications and certifications

• Bachelor’s degree or diploma: In Computer Science, IT, Electronics, Telecommunications or a related field
• CCNA: Mandatory
• CCNP Security: Preferred
• Palo Alto certification: Preferred
• Fortinet FCA or FCP, Network Security: Preferred
• Cisco Certified Specialist, Network Security Firepower: An advantage, or equivalent FTD knowledge
• Cisco ISE certification: An advantage, or practical ISE deployment and support experience

How you will work

• Strong troubleshooting and problem-solving skills.
• Clear verbal and written communication with customers.
• Owns assigned incidents, changes and deliverables through to closure.
• Good documentation discipline and adherence to security and change-control processes.
• Works independently and collaborates with senior engineers, project managers, OEMs and customer teams.
• Willing to work in a managed-services environment and take part in on-call support when required.

How you will be measured

• Incident-resolution quality and SLA compliance.
• Successful completion of approved security changes and implementation activities.
• First-time-right configuration and fewer repeat security incidents.
• Quality and timeliness of customer updates, technical reports and documentation.
• RCA contribution, recurring-incident reduction and security-improvement recommendations.
• Customer satisfaction and adherence to CDS technical and operational standards.