Network Security Engineer (Firewall Specialist)

Job Description: Network Security Engineer (Firewall Specialist)

Location: Ahmedabad, Gujarat

We are seeking a skilled Senior Network Security Engineer with a minimum of 5 years of experience to join our infrastructure security team. This role focuses on the design, implementation, and management of enterprise-grade security solutions across multiple platforms, ensuring high availability and robust protection of our corporate network.

Key Responsibilities

• Firewall Administration: Manage, configure, and troubleshoot enterprise firewalls, including Palo Alto (Strata/Prisma), Check Point (R8x), and Fortinet (FortiGate).

• VPN Management: Design and support secure remote access solutions using GlobalProtect and IPsec VPN tunnels for site-to-site connectivity.

• Incident Management: Act as a technical lead for security incidents, identifying root causes and performing remediation to minimize downtime.

• Service Request Management: Efficiently handle lifecycle requests (Rule additions, NAT configurations, Object creation) using ServiceNow.

• Network Operations: Maintain core networking standards including VLAN segmentation, routing protocols, and general CCNA-level troubleshooting.

• Policy Optimization: Periodically audit firewall rules to ensure compliance and remove redundant or insecure configurations.

Required Qualifications & Skills

• Experience: 5+ years of hands-on experience in Network Security or Cloud Security roles.

• Platform Expertise:

• Palo Alto: Deep understanding of App-ID, Content-ID, and User-ID policies.

• Fortinet: Proficiency with FortiManager and FortiAnalyzer.

• Networking Fundamentals: Strong grasp of the OSI model, TCP/IP, Subnetting, and Inter-VLAN routing.

• VPN Technology: Proven experience in managing Remote Access (GlobalProtect) and Site-to-Site VPNs.

• ITSM Tools: Experience working within an ITIL framework, specifically using ServiceNow for change and incident tracking.

Preferred / Good-to-Have Skills

• Application Delivery: Hands-on experience with F5 LTM/GTM (Big-IP) for load balancing and traffic management.

• Troubleshooting: Advanced packet analysis using Wireshark or tcpdump.

• Certifications: PCNSA/PCNSE, CCSA/CCSE, NSE 4/5, or CCNA Security.