Network Security Engineer

Role & responsibilities Implement, configure, and manage firewalls (Palo Alto, Check Point, Fortinet, Cisco Firepower Threat Defense (FTD)) across enterprise environments. Design and deploy security policies, NAT rules, VPNs (site-to-site and remote access), and access control lists. Perform firmware/OS upgrades, patching, and routine maintenance on firewall appliances. Monitor network traffic and firewall logs to identify and respond to security incidents. Troubleshoot connectivity, performance, and security-related issues across firewall platforms. Conduct firewall rule base reviews, optimization, and cleanup for compliance and performance. Collaborate with cross-functional IT teams to ensure network security aligns with organizational policies. Prepare and maintain documentation for configurations, architecture diagrams, and SOPs. Support audits and ensure compliance with security standards and best practices. Participate in on-call/rotational support for critical security incidents. Preferred candidate profile Strong hands-on experience in implementation and configuration of Palo Alto firewalls. Strong hands-on experience in implementation and configuration of Check Point firewalls. Strong hands-on experience in implementation and configuration of Fortinet firewalls. Good understanding of networking fundamentals (TCP/IP, routing, switching, VLANs). Experience with VPN technologies (IPSec, SSL VPN). Familiarity with security policies, threat prevention, and IPS/IDS configurations. Knowledge of high availability (HA) setup and disaster recovery for firewall environments. Relevant certifications such as PCNSE (Palo Alto), CCSA/CCSE (Check Point), or NSE (Fortinet) preferred. Bachelor's degree in Computer Science, IT, or a related field.