Network Security Firewall Consultant

Tata Consultancy Services; Cincinnati (OH); On-site; USD 110,000 - 130,000; Full time

Benefits offered by this job

Annual incentive

Medical coverage

Dental & vision

Job summary

Tata Consultancy Services Limited is seeking a Senior Engineer to plan, coordinate, and execute complex firewall deployments across enterprise environments. You will design, configure, and manage Check Point and Palo Alto firewalls, ensuring policy alignment, high availability, and secure connectivity.

Responsibilities include BOMs, runbooks, testing, and handover to operations. The role requires hands-on experience with firewall platforms, lifecycle management, and incident/change processes.

Qualifications

• Experience designing, building, configuring, migrating, and supporting Check Point and Palo Alto firewalls across multiple environments.

Responsibilities

• Plan, coordinate, and execute firewall deployments per deployment processes and site schedules.
• Assess environments to determine requirements, identify gaps, and document prerequisites.
• Develop firewall designs, BOMs, implementation plans, test plans, and backout artifacts.
• Build and configure Check Point and Palo Alto firewalls and management platforms.
• Coordinate hardware, licensing, rack-and-stack, cabling, circuits, IP addressing, DNS, and monitoring.
• Manage firewall operations including incidents, changes, troubleshooting, and vendor escalation.
• Perform policy lifecycle activities including implementation, recertification, cleanup, and drift remediation.
• Provide L2/L3 troubleshooting for connectivity, VPN, NAT, HA, and performance issues.
• Maintain patching, backups, health checks, and end-of-life refresh.
• Support validation, UAT, cutover, hypercare, and handover to operations.
• Follow ITAR/export-control and change-management requirements.

Skills

Firewall design

Firewall deployment

Policy configuration

Troubleshooting

Incident/change management

Network security fundamentals

Education

Bachelor of Computer Science

Tools

Check Point

Palo Alto

AlgoSec

Panorama

SmartConsole

Cisco networking

Zscaler

AWS/Azure firewalls

Splunk

Job description

Must Have Technical/Functional Skills

• Hands-on experience designing, building, configuring, migrating, and supporting Check Point and Palo Alto firewalls across enterprise, data center, colocation, cloud, third-party, and industrial site environments.
• Experience assessing as-is physical and logical networks, identifying deployment gaps, and producing low-level designs, bills of materials, migration plans, implementation runbooks, test plans, and rollback plans.
• Strong knowledge of firewall policies, objects, NAT, zones, routing, BGP/OSPF, VPN/IPsec, high availability, clustering, segmentation, threat prevention, logging, and secure third-party connectivity.
• Experience deploying and operating centralized firewall management platforms, including installation, onboarding, maintenance, upgrades, backup, recovery, and administrative access.
• Experience with lifecycle management covering deployment, consolidation, hardware/software refresh, migration, decommissioning, and license or hardware coordination.
• Ability to perform policy configuration, approval coordination, recertification, rule cleanup, optimization, duplicate/shadow rule analysis, and configuration-drift remediation.
• Experience troubleshooting connectivity and firewall issues using packet captures, traffic logs, routing tables, session analysis, and vendor diagnostic tools.
• Working knowledge of incident, request, problem, change, CAB, and configuration-management processes, preferably using ServiceNow.
• Experience coordinating rack-and-stack or remote hands, go-live, migration, UAT, cutover, stabilization, knowledge transfer, and handover to operations.
• Knowledge of secure segmentation, least privilege, ITAR/export-control requirements, and regulated delivery. Check Point CCSA/CCSE and Palo Alto PCNSA/PCNSE are preferred.
• Good to have: AlgoSec, Panorama, SmartConsole, Cisco networking, Zscaler, AWS/Azure firewalls, load balancers, WAF, Nozomi, Splunk, and automation/scripting.

Roles & Responsibilities

• Plan, coordinate, and execute firewall deployments in accordance with approved deployment processes, reference architectures, security standards, and site schedules.
• Assess existing site and network environments to determine physical and logical requirements, identify gaps, confirm dependencies, and document prerequisites.
• Develop firewall designs, configuration standards, bills of materials, procurement inputs, implementation plans, migration methods, test plans, backout plans, and handover artifacts.
• Build and configure Check Point and Palo Alto firewalls and management platforms, including policies, objects, NAT, routing, VPNs, HA, logging, threat-prevention profiles, and administrative access.
• Coordinate hardware, licensing, rack-and-stack, cabling, circuits, IP addressing, routing, DNS, monitoring, and remote-hands dependencies.
• Execute firewall go-lives, replacements, migrations, consolidations, upgrades, and decommissioning across data centers, colos, points of presence, cloud, third-party sites, and other facilities.
• Manage firewall and third-party connectivity operations, including incidents, requests, changes, approvals, troubleshooting, and vendor escalation.
• Perform policy lifecycle activities including implementation, peer review, recertification, cleanup, optimization, drift remediation, compliance validation, and evidence capture.
• Provide L2/L3 troubleshooting for connectivity, routing, VPN, NAT, HA, perfor mance, platform, and policy issues.
• Perform or coordinate maintenance, patching, software upgrades, configuration backup, recovery testing, certificate management, health checks, capacity monitoring, and end-of-life refresh.
• Support validation, UAT, cutover, hypercare, stabilization, SLA reporting, SOP creation, knowledge transfer, and formal handover to managed operations.
• Follow approved ITAR/export-control, access, data-handling, change-control, audit, and records-management requirements.

Generic Managerial Skills, If any

Strong communication, stakeholder coordination, technical documentation, disciplined change execution, problem-solving, and ability to work independently with global network, cloud, cybersecurity, OT, site, procurement, and vendor teams.

Salary Range: $110,000 - $130,000 per year

TCS Employee Benefits Summary:

• Discretionary Annual Incentive.
• Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.
• Family Support: Maternal & Parental Leaves.
• Insurance Options: Auto & Home Insurance, Identity Theft Protection.
• Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement.
• Time Off: Vacation, Time Off, Sick Leave & Holidays.
• Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.

Location

Cincinnati, OH

Function

TECHNOLOGY

Role

Senior Engineer

ID

434660

Skills

Network Security

Salary Range

$110,000 - $130,000

Desired Candidate Profile

Qualifications

BACHELOR OF COMPUTER SCIENCE