Network Security Engineer

Job Overview

We are looking for an experienced Network Security Engineer to design, implement, monitor, and support enterprise security infrastructure across on-premises, cloud, and hybrid environments. The ideal candidate should possess strong expertise in next-generation firewalls, SIEM platforms, cloud security, Zero Trust architecture, and modern cybersecurity operations.

The role requires hands-on experience with technologies such as Fortinet, SonicWall, Palo Alto Networks, SIEM solutions, SASE, SD-WAN, endpoint security, and threat detection platforms.

Key Responsibilities

Design, deploy, and manage enterprise network security solutions Configure and administer Fortinet, SonicWall, and Palo Alto firewalls Implement and maintain VPNs, IPS/IDS, web filtering, NAT, ACLs, and segmentation policies Monitor security events using SIEM, XDR, and SOC monitoring platforms Investigate security incidents, perform threat analysis, and support incident response activities Manage firewall policies, security rules, and compliance controls Implement Zero Trust Network Access (ZTNA) and identity-based security controls Support cloud security initiatives across AWS, Azure, and hybrid infrastructure Configure and support SD-WAN and Secure Access Service Edge (SASE) solutions Conduct vulnerability assessments and remediation activities Collaborate with infrastructure, cloud, and application teams to secure enterprise environments Maintain security documentation, diagrams, SOPs, and audit records Participate in on-call rotations and critical incident handling

Required Skills & Technologies

Firewall & Network Security

Fortinet FortiGate SonicWall Palo Alto Networks Check Point (preferred) Cisco Firepower / ASA VPN Technologies (IPSec / SSL VPN) IDS/IPS Web Application Firewall (WAF) NAC (Network Access Control)

Modern Security Technologies

Zero Trust Architecture (ZTA) ZTNA (Zero Trust Network Access) SASE (Secure Access Service Edge) SD-WAN Security SSE (Security Service Edge) CASB (Cloud Access Security Broker) Micro-segmentation Secure Remote Access Solutions

SIEM, SOC & Threat Detection

Experience with one or more:

Splunk QRadar Microsoft Sentinel LogRhythm ArcSight Elastic SIEM

Knowledge of:

SOC operations Threat hunting Log correlation MITRE ATT&CK framework Incident response Threat intelligence integration

Cloud & Infrastructure Security

AWS Security Microsoft Azure Security Hybrid cloud networking Cloud firewall management Security Groups / NSGs Identity & Access Management (IAM)

Endpoint & Advanced Security

EDR/XDR platforms CrowdStrike Microsoft Defender SentinelOne Endpoint hardening DLP (Data Loss Prevention) Email security solutions

Networking Fundamentals

Strong understanding of:

TCP/IP Routing & Switching VLANs BGP / OSPF DNS / DHCP Load Balancing Network troubleshooting

Automation & Scripting (Preferred)

Python PowerShell Bash scripting Security automation SOAR platforms

Preferred Certifications

Fortinet NSE / FCP Palo Alto PCNSA / PCNSE CCNP Security CISSP CEH CompTIA Security+ Microsoft SC Certifications AWS Security Specialty

Education

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field preferred.

Soft Skills

Strong analytical and troubleshooting skills Ability to work in high-pressure environments Excellent communication and stakeholder management Strong documentation and reporting abilities Proactive mindset with focus on continuous improvement