Network Security SME

Network Security SME

Location: Pune, Chennai, Hyderabad, Bengaluru

Shift: Core US Shift (9:00 AM - 6:00 PM EST) with occasional night shift coverage (India daytime)

Experience: 8+ Years

Job Summary

We are seeking an experienced Network Security SME with strong expertise in Palo Alto, Fortinet, F5 Load Balancers, SD-WAN, Infoblox DDI, and Cisco Routing & Switching. The ideal candidate will be responsible for designing, implementing, securing, and supporting complex enterprise network security environments while serving as a Tier-3 escalation point for critical incidents and architectural initiatives.

Key Responsibilities

Firewall Administration & Architecture

• Install, configure, and maintain Palo Alto PA-Series and Fortinet FortiGate firewalls.
• Design, implement, and audit firewall security policies, NAT rules, security profiles, and access controls.
• Manage enterprise firewall environments using Palo Alto Panorama and FortiManager/FortiAnalyzer.
• Configure and support Site-to-Site IPsec VPNs and Remote Access VPNs (GlobalProtect and FortiClient).
• Implement advanced security features including IPS/IDS, URL Filtering, Anti-Malware, Application Control, and Threat Prevention.
• Perform firmware upgrades, vulnerability remediation, patching, and lifecycle management.
• Maintain High Availability (HA) environments including Active/Passive and Active/Active deployments.

Network Security Operations

• Monitor security events and firewall logs to identify threats, anomalies, and unauthorized activity.
• Conduct proactive security assessments and recommend network hardening measures.
• Troubleshoot security incidents and provide root cause analysis (RCA).
• Ensure network security compliance and operational excellence.

Traffic Management & Core Network Services (DDI)

• Configure and manage F5 BIG-IP LTM including VIPs, Pools, Monitors, SSL Offloading, and iRules.
• Administer Infoblox Grid Manager for DNS, DHCP, and IP Address Management (IPAM).
• Maintain high-availability DDI infrastructure and optimize network service delivery.
• Support automation initiatives for IP allocation, DNS management, and operational efficiency.

SD-WAN & Edge Network Architecture

• Design, deploy, and optimize Fortinet Secure SD-WAN or Palo Alto Prisma SD-WAN environments.
• Implement application-aware routing and traffic steering for business-critical applications.
• Support hybrid connectivity solutions across on-premises, cloud, and branch locations.
• Manage secure VPN overlays and WAN optimization initiatives.

Cisco Routing & Switching

• Strong hands-on experience with Cisco Routing & Switching technologies.
• Troubleshoot Layer 2 and Layer 3 connectivity issues across enterprise networks.
• Configure and support VLANs, STP, OSPF, BGP, EIGRP, HSRP, VRRP, and routing policies.
• Work closely with security and infrastructure teams to ensure network availability and performance.

Troubleshooting & Support

• Act as a Tier 2/Tier 3 escalation engineer for complex network and security incidents.
• Perform detailed packet analysis using Wireshark, tcpdump, and firewall packet captures.
• Troubleshoot multi-vendor environments involving F5, Firewalls, SD-WAN, DNS/DHCP, and Cisco networks.
• Monitor firewall performance metrics including CPU, memory, session utilization, and throughput.
• Drive performance tuning and continuous service improvements.

Mandatory Skills

• Palo Alto Firewalls (PA-Series)
• Palo Alto Panorama
• Fortinet FortiGate
• FortiManager / FortiAnalyzer
• Site-to-Site VPN & Remote Access VPN
• F5 BIG-IP LTM
• Infoblox DNS, DHCP & IPAM
• SD-WAN (Fortinet Secure SD-WAN or Prisma SD-WAN)
• Cisco Routing & Switching
• Wireshark / tcpdump Packet Analysis
• Network Security Operations & Incident Management
• High Availability (HA) Firewall Deployments

Preferred Skills

• Cloud Networking (AWS/Azure)
• Network Automation
• Infrastructure Architecture
• Security Compliance & Governance
• Scripting using Python or Ansible

Ideal Candidate Profile

• 8+ years of enterprise network and network security experience.
• Strong architectural and troubleshooting expertise across security, routing, switching, load balancing, and SD-WAN.
• Proven experience managing large-scale multi-vendor environments.
• Excellent stakeholder communication and incident management skills.
• Comfortable working in US business hours and supporting critical production environments.