Senior Network Security Engineer - Firewall and VPN Management

Ernst & Young LLP ( EY India ); Bengaluru; On-site; INR 2,400,000 - 4,200,000; Full time

Job summary

EY India is seeking a Senior Network Security Engineer to lead the end-to-end lifecycle of firewall and VPN infrastructure. You will conduct assessments, design scalable NGFW/VPN solutions, and drive secure deployments with Zero Trust alignment, while maintaining thorough documentation and compliant change practices.

The role emphasizes hands-on implementation, rigorous vulnerability remediation, and ongoing operations to ensure high availability and secure connectivity for enterprise

Qualifications

• 5–6 years of dedicated experience in network security engineering and operations.
• Deep, hands-on expertise with NGFW platforms (Palo Alto, Fortinet, Check Point or Cisco Firepower).
• Strong proficiency in configuring, troubleshooting, and scaling IPsec, SSL VPN, GRE, and SD-WAN integrations.
• Advanced understanding of routing protocols (BGP, OSPF), NAT, VLANs, and TCP/IP fundamentals.
• Experience across Assess, Build, Migrate, Run phases in complex enterprise environments.
• Vendor certifications are highly preferred (e.g., PCNSE, NSE 4/7, CCSE).
• Foundational security certifications (CISSP, CCSP, SSCP) are a strong plus.
• Strong analytical, mentoring, and documentation skills.

Responsibilities

• Assess security posture and design scalable firewall/VPN solutions.
• Build and deploy NGFWs and VPN gateways with secure baselines.
• Plan migrations/cutovers with minimal downtime; produce SOPs and docs.
• Act as escalation point for incidents; manage rule lifecycle and patching.
• Ensure compliance with security frameworks and change management processes.

Skills

5-6 years experience

NGFW platforms

Palo Alto

Fortinet

Check Point

Cisco Firepower

VPN (IPsec/SSL/GRE)

SD-WAN

BGP

OSPF

NAT

VLAN

TCP/IP

ITIL Change Management

Mentoring

Documentation

Education

PCNSE, NSE 4/7, CCSE certifications

CISSP, CCSP, SSCP certifications

Tools

Palo Alto Networks

Fortinet

Check Point

Cisco Firepower

Job description

GMS-Senior-Firewall and VPN Management At EY, you'll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we're counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Senior Network Security Engineer (Firewall management including VPN Management) Experience Level: 5-6 Years

We are seeking a Senior Network Security Engineer to lead and execute the end-to-end lifecycle of our firewall and VPN infrastructure. This role is highly hands-on and spans the complete service delivery model: Assess, Build, Transition, and Operations. The ideal candidate will have deep technical expertise in enterprise infrastructure security, a strong understanding of Zero Trust principles, and the ability to maintain continuous security management with minimal disruption to business operations.

Key Responsibilities

• Assess (Design & Architecture Review) Conduct comprehensive assessments of existing network security postures, firewall rulesets, and VPN architectures. Identify security gaps, vulnerabilities, and optimization opportunities in legacy environments. Collaborate with architecture teams to design scalable, high-availability (HA) firewall and VPN solutions tailored to enterprise requirements. Define and document rule-base standardization, routing requirements, and integration points with existing SIEM and logging infrastructure.
• Build (Implementation & Deployment) Deploy and configure Next-Generation Firewalls (NGFW) and VPN gateways from the ground up. Implement site-to-site (IPsec) and remote-access (SSL/TLS) VPN solutions, ensuring secure and seamless connectivity. Configure advanced threat protection features, including IPS/IDS, web filtering, and application control. Establish secure baseline configurations and implement segmentation aligned with Zero Trust Architecture.
• Transition (Cutover & Handover) Plan and execute complex firewall migrations and VPN cutovers with zero-to-minimal downtime. Develop robust rollback plans and execute User Acceptance Testing (UAT) prior to go-live. Produce comprehensive "As-Built" documentation, standard operating procedures (SOPs), and topology diagrams. Conduct knowledge transfer sessions to align support teams on the newly deployed architecture.
• Operations & Continuous Management Serve as the senior technical escalation point for complex firewall and VPN incidents. Perform continuous firewall rule lifecycle management (rule recertification, unused rule cleanup, and optimization). Manage firmware upgrades, patch management, and vulnerability remediations for security appliances. Monitor VPN performance, tunnel stability, and firewall throughput, proactively addressing capacity constraints. Ensure continuous compliance with industry security frameworks and internal governance standards. Understanding of ITIL-based Change Management, managing end-to-end change lifecycle activities, CAB coordination, and compliant implementation of infrastructure and application changes.

Required Skills & Qualifications

• Experience: 5-6 years of dedicated experience in network security engineering and operations.
• Core Technologies: Deep, hands-on expertise with leading NGFW platforms (e.g., Palo Alto Networks, Fortinet, Check Point, or Cisco Firepower).
• VPN Mastery: Strong proficiency in configuring, troubleshooting, and scaling IPsec, SSL VPN, GRE, and SD-WAN integrations.
• Networking Foundations: Advanced understanding of routing protocols (BGP, OSPF), NAT, VLANs, and TCP/IP fundamentals.
• Enterprise Methodologies: Proven experience working through structured Assess, Build, Migrate, and Run phases in complex enterprise environments.
• Certifications: Industry-recognised vendor certifications (e.g., PCNSE, NSE 4/7, CCSE) are highly preferred.
• Foundational security certifications (CISSP, CCSP, or SSCP) are strong plus.
• Soft Skills: Strong analytical problem-solving skills, ability to mentor junior analysts, and excellent documentation practices.

EY | Building a better working world EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.