Position Summary:
We are looking for a Staff Engineer with deep domain expertise in Cisco firewall technologies and working experience with 2 3 other enterprise firewall platforms. The role involves leading requirement analysis, rulebook development, and validation of firewall migration tools to ensure seamless policy migration across multi-vendor environments. This is a key engineering role bridging network security domain expertise with tooling, automation, and process optimization.
Key Roles & Responsibilities:
- Lead requirement analysis for customer-specific firewall migration use cases and design scenarios.
- Develop comprehensive rulebooks that translate legacy firewall rules into structured, vendor-specific formats.
- Perform technical validation of firewall migration tools, ensuring accuracy in rule conversion, NAT handling, object mapping, and service translation.
- Act as the primary subject matter expert (SME) for Cisco firewalls including ASA, FTD, and Firepower Management Center (FMC) platforms.
- Support firewall migration efforts across other major vendors such as Palo Alto Networks, Fortinet, and Check Point etc.
- Simulate real-world scenarios in test environments to validate conversion logic and identify tool enhancement needs.
- Create and maintain technical documentation including standard operating procedures, test plans, and training materials.
- Mentor junior engineers on firewall architecture, migration tooling, and validation best practices.
Basic Qualifications:
- Bachelors or Masters degree in Computer Science, Information Security, or related field.
- 10+ years of hands-on experience in network security engineering, with significant focus on firewall technologies.
- Expert-level experience with Cisco firewalls (ASA, FTD, FMC, 1K-9K chassis).
- Hands-on experience with 2-3 other vendor firewalls.
- Proficient in network protocols and services (TCP/IP, VPN, NAT, ACLs, IDS/IPS, segmentation, security zones).
- Scripting and automation experience using Python, Bash, or similar for tool validation and rule parsing.
- Excellent troubleshooting, analytical, and communication skills.
Preferred Qualifications:
- Professional certifications such as PCNSE, NSE 4/7, or CCNA/CCNP/CCIE Security.
- Prior experience with firewall migration tools, conversion logic development, or automation frameworks.
- Familiarity with cloud-based firewall services (AWS Security Groups, Azure NSGs, GCP firewall rules) is a plus.
- Experience in BU-facing engineering or customer-driven solution roles.
