L3 Network and Security and Audit Expert

We are looking for a Network Security Administrator with 8+ years of experience in network and information security . The candidate should have strong hands-on experience in firewall administration, VPN management, IDS/IPS, network security monitoring, vulnerability remediation, incident response, and audit support. The role requires experience in handling enterprise firewalls, reviewing firewall rules, managing VPN access, supporting ISO/SOC/ITGC audits, preparing audit evidence, maintaining documentation, and coordinating with SOC, infrastructure, application, and vendor teams. Certifications such as Fortinet NSE/FCP, CCNA/CCNP Security, Palo Alto PCNSA/PCNSE, ISO 27001 LA/LI, CISA, CISSP, CISM, CEH, or Security+ will be preferred. Role Summary We are looking for an experienced Network Security Administrator with strong hands-on expertise in managing enterprise network security infrastructure, firewall administration, VPN technologies, security monitoring, compliance support, and audit activities. The ideal candidate should have 8+ years of experience in network security operations , including firewall policy management, vulnerability remediation, security incident handling, compliance audits, documentation, and implementation of security best practices across enterprise environments. Key Responsibilities Network Security Administration Manage, configure, and troubleshoot enterprise security devices including: Firewalls VPN gateways IDS/IPS Web/application filtering systems Network access control solutions Security monitoring tools Perform firewall rule creation, modification, review, optimization, and cleanup. Manage security policies for inbound, outbound, inter-VLAN, site-to-site, and remote access traffic. Configure and troubleshoot IPsec VPN, SSL VPN, site-to-site tunnels, and remote user VPN access . Monitor network security logs and alerts to identify suspicious or unauthorized activities. Perform incident analysis and coordinate with internal teams for containment and resolution. Ensure secure configuration of network devices such as firewalls, routers, switches, wireless controllers, and VPN concentrators. Support network segmentation, VLAN security, access control, and least privilege implementation. Review and harden firewall and network device configurations as per security standards. Security Operations & Incident Management Monitor security events from firewalls, SIEM, IDS/IPS, endpoint protection, and other security tools. Analyze security incidents such as: Malware communication Brute-force attempts Port scanning DoS/DDoS alerts Unauthorized access attempts Suspicious outbound traffic Prepare incident reports with root cause analysis, impact assessment, and corrective actions. Coordinate with SOC, infrastructure, application, and business teams for incident closure. Maintain proper ticket updates, evidence, and closure documentation. Support threat analysis and recommend preventive controls. Audit, Compliance & Documentation Support internal and external audits related to: ISO 27001 SOC audits ITGC audits Customer security audits Compliance and risk assessments Prepare and maintain audit evidence including: Firewall rule review reports VPN access reports User access review reports Change management records Asset inventory Security incident records Configuration backup evidence Vulnerability remediation status Participate in periodic firewall rule reviews and access control reviews. Ensure network security controls are aligned with organizational policies and compliance requirements. Assist in risk assessments, gap analysis, and remediation tracking. Maintain security SOPs, network diagrams, configuration documents, and operational procedures. Ensure all changes are implemented through approved change management processes. Vulnerability Management Coordinate vulnerability assessment activities for network and security infrastructure. Review VA/PT findings and coordinate remediation with respective teams. Track vulnerabilities related to firewalls, VPN devices, network devices, operating systems, and exposed services. Apply security patches, firmware upgrades, and configuration hardening as required. Validate closure evidence for vulnerabilities and audit observations. Change & Access Management Review firewall and VPN access requests based on business justification. Validate source, destination, port, protocol, and risk impact before implementation. Ensure proper approval is obtained before implementing security changes. Maintain change records and rollback plans. Periodically review privileged access on firewall and security devices. Enforce role-based access control and privileged access management practices. Required Technical Skills The candidate should have strong hands-on experience in the following areas: Firewall & Network Security Fortinet FortiGate / Palo Alto / Check Point / Cisco ASA / Sophos Firewall Firewall policy creation, NAT, routing, UTM profiles, IPS, application control, and web filtering High Availability firewall setup and troubleshooting Firewall log analysis and rule optimization DoS/DDoS policy tuning and monitoring VPN Technologies IPsec VPN SSL VPN Remote access VPN Site-to-site VPN VPN troubleshooting and log analysis MFA integration for VPN access Network Technologies TCP/IP, DNS, DHCP, NAT, VLAN, routing, switching Static routing, policy-based routing, and dynamic routing basics LAN/WAN troubleshooting Wireless security concepts Network segmentation and access control Security Tools & Platforms SIEM monitoring and log analysis IDS/IPS Endpoint security tools Vulnerability scanners PAM solutions MFA/SSO solutions Configuration backup and monitoring tools Audit & Compliance ISO 27001 controls ITGC controls Access review process Change management process Incident management process Asset inventory and documentation Risk assessment and mitigation tracking Required Experience Minimum 8 years of total experience in IT / Information Security / Network Security . At least 5+ years of hands-on experience in firewall and network security administration . Experience in managing enterprise firewalls and VPN infrastructure. Experience in supporting security audits and compliance requirements. Experience with vulnerability management and remediation tracking. Experience in preparing technical documentation, audit evidence, and security reports. Experience working with SOC teams, infrastructure teams, vendors, and business stakeholders. Experience in incident handling and security event analysis. Preferred Certifications Candidates with any of the following certifications will be preferred: Network Security Certifications Fortinet NSE 4 / FCP Network Security Palo Alto PCNSA / PCNSE Cisco CCNA Security / CCNP Security Check Point CCSA / CCSE Sophos Certified Architect / Engineer Information Security & Audit Certifications ISO 27001 Lead Implementer / Lead Auditor CISA Certified Information Systems Auditor CISSP Certified Information Systems Security Professional CompTIA Security+ CEH – Certified Ethical Hacker CISM – Certified Information Security Manager Cloud / Additional Certifications Microsoft SC-900 / AZ-500 AWS Security Specialty CCNA / CCNP Enterprise ITIL Foundation Roles & Responsibilities Summary Manage firewall, VPN, IDS/IPS, and network security infrastructure. Perform security monitoring, log analysis, and incident response. Implement firewall rules and security changes as per approved process. Support audit and compliance evidence collection. Perform periodic firewall rule reviews and access reviews. Coordinate vulnerability remediation and security hardening. Maintain documentation, SOPs, network diagrams, and audit records. Ensure security controls are aligned with company policies and compliance requirements. Work closely with SOC, IT operations, internal audit, external auditors, and vendors. Soft Skills Required Strong analytical and troubleshooting skills. Good communication and documentation skills. Ability to coordinate with technical and non-technical teams. Strong understanding of risk and compliance requirements. Ability to work under pressure during incidents and critical outages. Detail-oriented approach for audit evidence and security documentation. Ownership mindset and proactive approach toward security improvements. Educational Qualification Bachelor’s degree in Computer Science, Information Technology, Electronics, Cybersecurity, or any Bachelor's degree with relevant experience in Network Security, Information Security, or a related field. Equivalent industry experience and certifications may also be considered. Preferred Candidate Profile The preferred candidate should be a technically strong Network Security Administrator with proven experience in managing firewalls, VPNs, network security controls, and compliance audits. The candidate should be capable of handling daily operations, security incidents, vulnerability remediation, audit evidence preparation, and security documentation independently.