Senior Firewall Migration Engineer

Sembridge; Dadri; On-site; INR 1,200,000 - 2,400,000; Part time

Job summary

Sembridge is seeking an experienced Senior Network Security Engineer to lead a high‑impact firewall migration from Palo Alto PAN‑OS/Panorama to Fortinet FortiGate/FortiManager/FortiAnalyzer. This hands‑on technical lead role requires migration expertise and end‑to‑end project ownership in a client‑facing setting.

You will plan, execute, and validate the migration, manage production cutovers, and mentor on‑site teams while ensuring minimal disruption and clear rollback procedures.

Qualifications

• 8+ years of enterprise network security engineering experience, with at least 5 years of hands‑on NGFW experience.
• Proven track record of leading at least two end‑to‑end production firewall migrations, including at least one Palo Alto to Fortinet migration.
• Strong expertise in Palo Alto PAN‑OS, Panorama, App‑ID, User‑ID, security profiles, SSL decryption, GlobalProtect, and HA.
• Hands‑on expertise in FortiGate/FortiOS 7.x, FortiManager, FortiAnalyzer, Application Control, IPS, web filtering, VPNs, FSSO, VDOMs, and HA.
• Practical experience with FortiConverter and manual policy/configuration translation.
• Strong networking fundamentals, including BGP, OSPF, VLANs, VRFs, static routing, and policy‑based routing.
• Experience in migration testing, change management, production cutovers, rollback planning, and technical documentation.
• Excellent communication skills and the ability to lead client‑facing technical discussions.

Responsibilities

• Lead end‑to‑end firewall migration projects from PAN‑OS/Panorama to Fortinet FortiGate/FortiManager/FortiAnalyzer.
• Perform technical discovery, document network topology, security policies, routing, NAT, VPNs, and application dependencies.
• Analyze and rationalize existing firewall rules and obtain client approval for changes.
• Design and implement Fortinet architecture, including FortiGate, HA, segmentation, routing, and FortiAnalyzer integration.
• Plan and execute inline deployments with rollback procedures and minimal service disruption.
• Develop and execute application‑level validation plans covering traffic flows, VPN connectivity, NAT, and logging.
• Lead production cutovers, troubleshoot issues, and provide post‑migration hypercare and knowledge transfer.

Skills

NGFW experience

Palo Alto PAN-OS

Fortinet FortiGate

Firewall migration

Project leadership

Network security

VPNs and HA

Education

CCNP Enterprise

CCNP Security

Fortinet FCX

Fortinet FCSS

Tools

FortiManager

FortiAnalyzer

FortiConverter

PAN-OS Panorama

Job description

ANM is seeking an experienced Senior Network Security Engineer to lead an end-to-end enterprise firewall migration from Palo Alto Networks (PAN-OS/Panorama) to Fortinet (FortiGate/FortiManager/FortiAnalyzer).

This is a hands‑on technical lead role requiring strong migration expertise, end‑to‑end project ownership, and the ability to manage production cutovers with minimal business disruption.

• Role: Senior Network Security Engineer – Firewall Migration
• Experience: 8+ years in Network Security
• Engagement: Project‑based Contract
• Working Hours: U.S. hours, including after‑hours cutovers as required
• Travel: Client‑site visits may be required
• Lead technical discovery, assess the existing Palo Alto infrastructure, and document network topology, security policies, routing, NAT, VPNs, and application dependencies.
• Analyze and rationalize existing firewall rules, identify redundant or overly permissive policies, and obtain client approval for recommended changes.
• Design and implement the target Fortinet architecture, including FortiGate, HA, segmentation, routing, and FortiManager/FortiAnalyzer integration.
• Migrate firewall configurations using FortiConverter and perform manual configuration translation wherever required.
• Plan and execute inline deployments, ensuring minimal service disruption and clearly defined rollback procedures.
• Develop and execute application‑level validation plans covering traffic flows, VPN connectivity, NAT, HA failover, logging, and security policies.
• Lead production cutovers, troubleshoot issues, and provide post‑migration hypercare, documentation, and knowledge transfer.

Required Skills & Experience

• 8+ years of enterprise network security engineering experience, with at least 5 years of hands‑on NGFW experience.
• Proven track record of leading at least two end‑to‑end production firewall migrations, including at least one Palo Alto to Fortinet migration.
• Strong expertise in Palo Alto PAN-OS, Panorama, App-ID, User-ID, security profiles, SSL decryption, GlobalProtect, and HA.
• Hands‑on expertise in FortiGate/FortiOS 7.x, FortiManager, FortiAnalyzer, Application Control, IPS, web filtering, VPNs, FSSO, VDOMs, and HA.
• Practical experience with FortiConverter and manual policy/configuration translation.
• Strong networking fundamentals, including BGP, OSPF, VLANs, VRFs, static routing, and policy‑based routing.
• Experience in migration testing, change management, production cutovers, rollback planning, and technical documentation.
• Excellent communication skills and the ability to lead client‑facing technical discussions.
• Fortinet FCP/FCSS Network Security or FCX
• CCNP Enterprise/Security or equivalent