Security Network Engineer

NTT DATA, Europe & LATAM, Branch in USA, Inc.; Ciudad de México; A distancia; MXN 573.000 - 815.000; Jornada completa

Descripción de la vacante

NTT DATA is seeking a Senior Network Security Engineer to lead a major migration from Check Point to Fortinet while maintaining secure connectivity across enterprise networks, cloud, and remote sites.

The role emphasizes SD-WAN optimization, firewall management across Cisco ASA, Palo Alto, Fortinet FortiGate, and Check Point, and implementing zero-trust security for cloud apps and remote users.

Formación

• 5 to 8 years of network security engineering experience.
• Expertise with Fortinet FortiGate, Check Point, Palo Alto and Cisco ASA firewalls.
• Strong knowledge of SD-WAN including Fortinet, Cisco and Prisma Access.
• Experience configuring EIGRP, BGP and OSPF routing protocols.
• Hands-on with Zscaler ZIA/ZPA and Radware DDoS protection.
• Proficiency in VPN technologies (IPsec, SSL, GRE, DMVPN, L2TP).
• Knowledge of zero-trust security and secure SD-WAN implementation.

Responsabilidades

• Lead migration from Check Point to Fortinet with policy conversion and testing.
• Manage firewalls across corporate, cloud, and remote sites (Cisco ASA, Palo Alto, Fortinet).
• Design and optimize firewall rules for security and performance.
• Perform security risk assessments and firewall audits.
• Develop and enforce network security policies per NIST/CIS/ISO 27001.
• Implement and optimize SD-WAN and WAN optimization.
• Coordinate with SOC and vendor support to resolve incidents.
• Automate audits and SD-WAN policy updates with scripts.

Conocimientos

Fortinet FortiGate

Check Point

Palo Alto

Cisco ASA

SD-WAN

Zscaler ZIA/ZPA

EIGRP/BGP/OSPF

VPN technologies

Radware DDoS

NIST/CIS/ISO 27001

Python/Bash/PowerShell

Packet captures

Educación

Fortinet NSE 4/7

Check Point CCSA/CCSE

Palo Alto PCNSA/PCNSE

Cisco CCNP Security

Zscaler ZCCP

Herramientas

Python

Bash

PowerShell

Packet capture tools

Security logs

Ticketing platforms

Descripción del empleo

Location: Fully Remote

Work Arrangement: 100% remote

Contract Length: At least 1 year

Contract Rate: $29.30 per hour in USD. Final rate will be determined based on relevant experience and overall fit for the position.

NTT DATA is seeking a highly skilled Senior Network Security Engineer to help secure, optimize, and transform an enterprise network environment. This role will lead a key migration from Check Point to Fortinet firewalls while maintaining secure, reliable connectivity across corporate, cloud, branch, and remote environments. The engineer will also support and enhance SD-WAN, routing, cloud security, DDoS protection, and network automation capabilities.

Responsibilities:

• Lead the migration from Check Point to Fortinet, including policy conversion, rule optimization, testing, and traffic validation.
• Manage and maintain Cisco ASA, Palo Alto, Fortinet FortiGate, and Check Point firewalls across corporate, cloud, and remote sites.
• Design and optimize firewall rule sets to improve security, performance, and compliance.
• Perform network security risk assessments, firewall audits, and configuration reviews.
• Manage and optimize SD-WAN architecture to improve application performance, resilience, and latency.
• Implement policy-based traffic steering, failover mechanisms, and WAN optimization.
• Integrate SD-WAN with firewalls, cloud security solutions, branch locations, and on-premises networks.
• Troubleshoot SD-WAN performance issues, routing conflicts, and connectivity problems.
• Design and implement static NAT, dynamic NAT, and Port Address Translation (PAT) policies.
• Configure and troubleshoot EIGRP, BGP, and OSPF for enterprise and cloud routing.
• Optimize routing policies for high availability, redundancy, and performance.
• Administer and optimize Zscaler ZIA and ZPA for secure cloud access and web filtering.
• Implement zero-trust security policies for cloud applications and remote users.
• Troubleshoot Zscaler tunnels, proxy configurations, and application access issues.
• Implement and maintain Radware DDoS protection against volumetric and application-layer attacks.
• Configure IPS and IDS solutions to detect and mitigate security threats.
• Partner with SOC teams to analyze and respond to security incidents.
• Lead troubleshooting for firewall, SD-WAN, NAT, and routing issues affecting business-critical applications.
• Use packet captures and security logs to diagnose complex network problems.
• Coordinate with Cisco, Fortinet, Palo Alto, and Zscaler support teams to resolve complex technical issues.
• Develop and enforce network security policies aligned with NIST, CIS Benchmarks, and ISO 27001.
• Maintain current documentation for firewall rules, SD-WAN policies, routing, and security configurations.
• Develop Python, Bash, or PowerShell scripts to automate firewall audits and SD-WAN policy updates.
• Implement network automation frameworks to streamline security operations and improve efficiency.

Required Experience:

• 5 to 8 years of experience in network security engineering.
• Expertise with Fortinet FortiGate, Check Point, Palo Alto, and Cisco ASA firewalls.
• Strong knowledge of SD-WAN solutions, including Fortinet SD-WAN, Cisco SD-WAN, and Prisma Access.
• Experience configuring and troubleshooting EIGRP, BGP, and OSPF routing protocols.
• Hands‑on experience managing Zscaler ZIA and ZPA cloud security solutions.
• Proficiency with VPN technologies, including IPsec, SSL, GRE, DMVPN, and L2TP, and an understanding of their security implications.
• Strong skills in NAT, firewall rule optimization, and routing table analysis.
• Experience with Radware DDoS protection, IPS/IDS, and threat mitigation.
• Knowledge of zero‑trust security architectures and secure SD‑WAN implementation.
• Strong analytical and troubleshooting skills using packet captures, firewall logs, and security telemetry.
• Familiarity with ticketing tools.
• Good communication and interpersonal skills, a proactive attitude, and the ability to work effectively as part of a team.

Nice-to-Have:

• Experience leading enterprise firewall migration projects, particularly from Check Point to Fortinet.
• Experience working in complex enterprise environments that connect on‑premises, branch, remote‑user, and cloud networks.
• Network security automation experience using Python, Bash, or PowerShell.

Tools & Technologies:

• Fortinet FortiGate and Fortinet SD-WAN; Check Point; Palo Alto and Prisma Access; Cisco ASA and Cisco SD-WAN.
• Zscaler ZIA/ZPA; Radware DDoS protection; IPS/IDS technologies.
• EIGRP, BGP, OSPF, NAT, PAT, IPsec, SSL, GRE, DMVPN, and L2TP.
• Python, Bash, PowerShell, packet‑capture tools, security logs, and ticketing platforms.
• NIST, CIS Benchmarks, and ISO 27001 security frameworks and standards.

Education & Certifications:

Preferred certifications include Fortinet NSE 4 or NSE 7, Check Point CCSA or CCSE, Palo Alto PCNSA or PCNSE, Cisco CCNP Security, Zscaler ZCCP, and relevant SD-WAN certifications.

Required Equipment:

This role requires the use of a personal laptop. Candidates must be comfortable with company security software and device management tools being installed on their laptop as part of the onboarding process and for the duration of the engagement.

About NTT DATA

NTT DATA is a Top 5 global IT services provider with more than 190,000 professionals across 50+ countries. We combine industry expertise with capabilities in consulting, technology, AI, cloud, applications, infrastructure, and connectivity to help organizations innovate, optimize, and transform. Through responsible innovation, we deliver meaningful business outcomes, accelerate client success, and create a positive impact on society.

Equal Opportunity Employer

NTT DATAis committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/Affirmative Action-Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class.NTT DATA is an Equal Opportunity Employer Male/Female/Disabled/Veteran and a VEVRAA Federal Contractor.

Req ID: 1345