Staff Engineer

Position Summary:

We are looking for a Staff Engineer with deep domain expertise in Cisco firewall technologies and working experience with 2 3 other enterprise firewall platforms. The role involves leading requirement analysis, rulebook development, and validation of firewall migration tools to ensure seamless policy migration across multi-vendor environments. This is a key engineering role bridging network security domain expertise with tooling, automation, and process optimization.

Key Roles & Responsibilities:

• Lead requirement analysis for customer-specific firewall migration use cases and design scenarios.
• Develop comprehensive rulebooks that translate legacy firewall rules into structured, vendor-specific formats.
• Perform technical validation of firewall migration tools, ensuring accuracy in rule conversion, NAT handling, object mapping, and service translation.
• Act as the primary subject matter expert (SME) for Cisco firewalls including ASA, FTD, and Firepower Management Center (FMC) platforms.
• Support firewall migration efforts across other major vendors such as Palo Alto Networks, Fortinet, and Check Point etc.
• Simulate real-world scenarios in test environments to validate conversion logic and identify tool enhancement needs.
• Create and maintain technical documentation including standard operating procedures, test plans, and training materials.
• Mentor junior engineers on firewall architecture, migration tooling, and validation best practices.

Basic Qualifications:

• Bachelors or Masters degree in Computer Science, Information Security, or related field.
• 10+ years of hands-on experience in network security engineering, with significant focus on firewall technologies.
• Expert-level experience with Cisco firewalls (ASA, FTD, FMC, 1K-9K chassis).
• Hands-on experience with 2-3 other vendor firewalls.
• Proficient in network protocols and services (TCP/IP, VPN, NAT, ACLs, IDS/IPS, segmentation, security zones).
• Scripting and automation experience using Python, Bash, or similar for tool validation and rule parsing.
• Excellent troubleshooting, analytical, and communication skills.

Preferred Qualifications:

• Professional certifications such as PCNSE, NSE 4/7, or CCNA/CCNP/CCIE Security.
• Prior experience with firewall migration tools, conversion logic development, or automation frameworks.
• Familiarity with cloud-based firewall services (AWS Security Groups, Azure NSGs, GCP firewall rules) is a plus.
• Experience in BU-facing engineering or customer-driven solution roles.