Network & Security Design Specialist

Job Description : - Design, implement, and manage firewall policies, NAT, VPN, and segmentation rules.- Deploy and manage proxy / secure web gateway solutions with filtering, SSL inspection, and access control.- Configure and tune IDS/IPS solutions to detect and prevent security threats.- Implement network segmentation and Zero Trust principles.- Perform firewall and proxy rule audits and security hardening.- Integrate network security tools with SIEM (Sentinel, Splunk) and other security platforms.- Provide L3 troubleshooting and incident response support.- Ensure compliance with security standards like NIST, ISO 27001, CIS.- Maintain documentation, SOPs, and architecture diagrams.- Define, maintain, and evolve network security strategies, roadmaps, standards, and architectures aligned with business objectives.- Establish, enforce, and continuously improve security policies, procedures, and domain-level processes.- Define and maintain end-to-end infrastructure and security architecture aligned with business and IT strategy.- Design scalable, secure, and high-performing environments across on-prem, cloud, and hybrid platforms.- Establish and enforce standards, policies, and best practices for infrastructure and security domains.- Drive technology strategy, roadmap planning, and solution selection across infrastructure and security toolsets.Qualification & Experience : - Relevant experience should be 7+ years.- Firewalls : Palo Alto, Fortinet, Check Point, Cisco ASA/FTD.- Proxy / Secure Web Gateway : Zscaler, Blue Coat, Netskope.- IDS/IPS technologies.- Networking : TCP/IP, BGP, OSPF, VLANs, VPNs, NAT.- Security concepts : Zero Trust, segmentation, threat detection.- SIEM integration : Microsoft Sentinel, Splunk.- Strong incident handling expertise across containment, eradication, recovery, and lessons learned.- Hands-on network security knowledge (firewalls, IDS/IPS, WAF, VPN, Proxies, NAC) and packet/log analysis.- Experience integrating cloud and identity telemetry; familiarity with Azure/M365 security preferred.- Knowledge of frameworks and models : MITRE ATT&CK, NIST 800-61 IR, NIST CSF, ISO 27001, NIS2.- Excellent communication, stakeholder management, and executive reporting skills.- Audit participation experience is a must.Preferred Certifications : - Security+ : CompTIA Security+.- Cloud security (e.g., AZ500, SC200, CCSP).- Network security (e.g., NSE, PCNSA/PCNSE, CCNP Security).- CISSP/CISM.- CIS/NIST/ISO 27001. (ref:hirist.tech) Job Description : - Design, implement, and manage firewall policies, NAT, VPN, and segmentation rules.- Deploy and manage proxy / secure web gateway solutions with filtering, SSL inspection, and access control.- Configure and tune IDS/IPS solutions to detect and prevent security threats.- Implement network segmentation and Zero Trust principles.- Perform firewall and proxy rule audits and security hardening.- Integrate network security tools with SIEM (Sentinel, Splunk) and other security platforms.- Provide L3 troubleshooting and incident response support.- Ensure compliance with security standards like NIST, ISO 27001, CIS.- Maintain documentation, SOPs, and architecture diagrams.- Define, maintain, and evolve network security strategies, roadmaps, standards, and architectures aligned with business objectives.- Establish, enforce, and continuously improve security policies, procedures, and domain-level processes.- Define and maintain end-to-end infrastructure and security architecture aligned with business and IT strategy.- Design scalable, secure, and high-performing environments across on-prem, cloud, and hybrid platforms.- Establish and enforce standards, policies, and best practices for infrastructure and security domains.- Drive technology strategy, roadmap planning, and solution selection across infrastructure and security toolsets.Qualification & Experience : - Relevant experience should be 7+ years.- Firewalls : Palo Alto, Fortinet, Check Point, Cisco ASA/FTD.- Proxy / Secure Web Gateway : Zscaler, Blue Coat, Netskope.- IDS/IPS technologies.- Networking : TCP/IP, BGP, OSPF, VLANs, VPNs, NAT.- Security concepts : Zero Trust, segmentation, threat detection.- SIEM integration : Microsoft Sentinel, Splunk.- Strong incident handling expertise across containment, eradication, recovery, and lessons learned.- Hands-on network security knowledge (firewalls, IDS/IPS, WAF, VPN, Proxies, NAC) and packet/log analysis.- Experience integrating cloud and identity telemetry; familiarity with Azure/M365 security preferred.- Knowledge of frameworks and models : MITRE ATT&CK, NIST 800-61 IR, NIST CSF, ISO 27001, NIS2.- Excellent communication, stakeholder management, and executive reporting skills.- Audit participation experience is a must.Preferred Certifications : - Security+ : CompTIA Security+.- Cloud security (e.g., AZ500, SC200, CCSP).- Network security (e.g., NSE, PCNSA/PCNSE, CCNP Security).- CISSP/CISM.- CIS/NIST/ISO 27001. (ref:hirist.tech)