Senior Network Security Engineer (F5 & Zscaler ZPA)

UST; Thiruvananthapuram; Presencial; INR 1 800 000 - 2 400 000; Tempo integral

Resumo da oferta

UST is seeking an experienced L3 Network Security Engineer to lead design, architecture, and governance of enterprise network security platforms. You will drive security across Fortinet and Cisco firewalls, Azure WAF/Firewall, F5, NAC (Cisco/Aruba), and Zscaler, applying Zero Trust principles and advanced security operations.

The role requires strong leadership as the top escalation point for complex incidents and projects, with hands-on expertise and collaboration across Cloud, Infrastructure,

Qualificações

• 8+ years of experience in Network Security Engineering.
• Hands-on with enterprise firewall and security platforms.
• Experience leading firewall migration, transformation, and modernization initiatives.
• Proven experience designing Zero Trust and network segmentation strategies.
• Experience in large-scale enterprise environments.

Responsabilidades

• Design, implement, optimize, and manage Azure WAF and Azure Firewall, Fortinet, Cisco, and F5 platforms.
• Define secure network architectures aligned with business and security requirements.
• Design firewall policies, segmentation strategies, and Zero Trust architectures.
• Lead incident/problem management and coordination during security events.
• Mentor L1/L2 engineers and collaborate with Cloud/Infrastructure/SOC teams.

Conhecimentos

Zero Trust Architecture

Incident Management

Problem Management

mentoring L1/L2 engineers

Formação académica

CISSP

CCNP Security

Fortinet NSE Certifications

Azure Security Certifications (AZ-500)

F5 Certifications

Cisco ISE Certifications

Aruba ClearPass Certifications

Ferramentas

Fortinet Firewalls

Cisco Firewalls

Azure WAF

Azure Firewall

F5 Load Balancer

Cisco ISE

Aruba ClearPass

NAC (Cisco & Aruba)

Zscaler ZIA/ZPA

Descrição da oferta de emprego

Job Summary

We are seeking an experienced L3 Network Security Engineer to lead the design, architecture, optimization, and operational governance of enterprise network security platforms. The ideal candidate will provide technical leadership across firewall, web application firewall, network access control, and cloud security technologies while serving as the highest level of escalation for complex security incidents and projects. The role requires strong expertise in Fortinet Firewalls, Cisco Firewalls, Azure WAF, Azure Firewall, F5, NAC (Cisco & Aruba), and Zscaler (ZIA/ZPA), along with a deep understanding of security architecture, Zero Trust principles, and enterprise network security operations.

Key Responsibilities

• Lead the design, implementation, optimization, and lifecycle management of:
  • Azure WAF & Azure Firewall
  • Fortinet Firewalls
  • Cisco Firewalls
  • F5 Load Balancers
  • NAC Solutions (Cisco ISE, Aruba ClearPass)
  • Zscaler (ZIA & ZPA)
• Define and implement secure network architectures aligned with business and security requirements.
• Design advanced firewall security policies, network segmentation strategies, and Zero Trust architectures.
• Conduct security architecture reviews and recommend improvements to strengthen the organization's security posture.

Operations & Technical Leadership

• Act as the highest technical escalation point for complex network security incidents and problem management.
• Review and approve complex firewall changes and network security designs.
• Lead firmware upgrades, platform modernization initiatives, and lifecycle management activities.
• Manage vendor escalations and participate in major incident investigations and Root Cause Analysis (RCA).

Security Governance & Optimization

• Drive firewall migration, consolidation, and transformation projects.
• Perform firewall rule recertification, policy cleanup, and compliance-driven security initiatives.
• Conduct capacity planning, performance tuning, and platform optimization exercises.
• Develop operational standards, technical documentation, runbooks, and best practices.

Collaboration & Mentoring

• Provide technical leadership, guidance, and mentoring to L1/L2 engineers.
• Collaborate with Cloud, Infrastructure, SOC, and Application teams to support security and business initiatives.
• Support regulatory audits, security assessments, and compliance requirements.

Required Skills

Core Network Security Technologies

• Fortinet Firewalls
• Cisco Firewalls
• Azure WAF
• Azure Firewall
• F5 Load Balancer
• Cisco ISE
• Aruba ClearPass
• NAC (Network Access Control)
• Zscaler (ZIA & ZPA)

Security & Architecture

• Firewall Policy Management
• Network Segmentation
• Zero Trust Architecture
• Security Architecture Design & Review
• Network Security Operations
• Incident & Problem Management

Cloud & Governance

• Azure Security
• Security Compliance & Audits
• Security Assessments
• Capacity Planning & Performance Optimization
• Vendor Management & Escalations

Preferred Certifications

• CISSP
• CCNP Security
• Fortinet NSE Certifications
• Microsoft Azure Security Certifications (AZ-500)
• F5 Certifications
• Cisco ISE Certifications
• Aruba ClearPass Certifications

Experience Required

• 8+ years of experience in Network Security Engineering.
• Strong hands-on expertise with enterprise firewall and security platforms.
• Experience leading firewall migration, transformation, and modernization initiatives.
• Proven experience in designing and implementing Zero Trust and network segmentation strategies.
• Experience working in large-scale enterprise environments.

Skills

• Zscaler(ZPA)
• Azure network firewall
• F5
• WAF
• NAC (Aruba, ISE)
• Firewall (Fortinet/palo alto)