Firewall Engineer

Tata Consultancy Services; Metro Manila; On-site; PHP 900,000 - 1,500,000; Full time

Job summary

Tata Consultancy Services in the Philippines is seeking an experienced Network Security Engineer to manage and harden firewalls, IPS/IDS, WAF, and DDoS protection across enterprise environments.

You will implement policies, optimize configurations, monitor alerts, and collaborate with application teams and SOC to maintain security posture and compliance.

Qualifications

• 4+ years of hands-on experience in Network Security Operations.
• Experience supporting enterprise environments with multiple security platforms.
• Experience managing production environments and security incidents.

Responsibilities

• Manage, configure, and troubleshoot NGFWs (FortiGate) including policy optimization.
• Administer and tune IPS/IDS, monitor alerts, and investigate incidents.
• Deploy and manage WAF policies with F5 solutions and coordinate with apps teams.
• Oversee Anti-DDoS protections, bot defense, and threat mitigation strategies.
• Review logs, threat intel feeds, and support audits and compliance.

Skills

Firewall policy optimization

IPS/IDS tuning

Security incident analysis

Network security architecture

Troubleshooting security issues

Threat detection capabilities

SIEM log analysis

DDoS mitigation understanding

Troubleshooting complex networks

VPN technologies

SSL/TLS, DNS, TCP/IP knowledge

Education

PCNSE / NSE 4/5/7 / FCP

F5-Certified Administrator (F5-CA)

CISSP / CISM or equivalent

Tools

Fortinet FortiGate

AlgoSec

F5 WAF

F5 Anti-DDoS

F5 Bot Defense

Job description

• Manage, configure, and troubleshoot Next-Generation Firewalls (NGFW) from:
• Fortinet FortiGate
• Perform firewall rule reviews, policy optimization, and access control management.
• Implement security best practices and firewall hardening standards.
• Conduct firewall health checks, upgrades, patching, and high availability management.
• Utilize AlgoSec for firewall policy management, compliance validation, and change automation.

IPS/IDS Administration

• Configure, maintain, and tune IPS/IDS solutions including:
• Fortinet IPS
• Monitor security alerts and investigate suspicious activities.
• Develop and optimize signatures, policies, and threat detection capabilities.
• Perform incident analysis and recommend remediation actions.

Web Application Firewall (WAF)

• Deploy, configure, and manage F5 Advanced WAF solutions.
• Create and maintain WAF security policies.
• Analyze application-layer attacks and implement mitigation controls.
• Coordinate with application teams to secure critical web applications.

Anti-DDoS Protection

• Administer and optimize F5 DDoS mitigation solutions.
• Monitor network traffic patterns and identify attack vectors.
• Develop DDoS response procedures and mitigation strategies.
• Conduct testing and validation of protection mechanisms.

Bot Defense Management

• Implement and manage F5 Bot Defense solutions.
• Monitor and analyze automated bot activities targeting applications.
• Configure bot protection policies and exceptions.
• Reduce fraudulent traffic and protect business-critical applications.

Security Operations & Compliance

• Review security logs, alerts, and threat intelligence feeds.
• Participate in incident response activities and root cause analysis.
• Develop and maintain technical documentation, SOPs, and operational procedures.
• Support audits, vulnerability assessments, and compliance initiatives.
• Collaborate with SOC, Network, Infrastructure, and Application teams.

Required Skills & Experience

Technical Skills

• Strong hands-on experience with:
• Fortinet FortiGate
• AlgoSec
• F5 WAF
• F5 Anti-DDoS
• F5 Bot Defense
• Experience in IPS/IDS tuning and administration.
• Deep understanding of:
• TCP/IP
• Routing and Switching
• SSL/TLS
• DNS
• VPN Technologies
• Network Security Architecture
• Knowledge of SIEM integration and log analysis.
• Experience in troubleshooting complex network security issues.

Certifications (Preferred)

• PCNSE (Palo Alto Networks Certified Network Security Engineer)
• NSE 4/5/7 or Fortinet Certified Professional (FCP)
• F5 Certified Administrator (F5-CA)
• CISSP, CISM, or equivalent security certifications

Experience

• 4+ years of hands-on experience in Network Security Operations.
• Experience supporting enterprise environments with multiple security platforms.
• Experience managing critical production environments and security incidents.