About the role
Job Overview
We are looking for an experienced Network Security Engineer to design, implement, monitor, and support enterprise security infrastructure across on-premises, cloud, and hybrid environments. The ideal candidate should possess strong expertise in next-generation firewalls, SIEM platforms, cloud security, Zero Trust architecture, and modern cybersecurity operations.
The role requires hands-on experience with technologies such as Fortinet, SonicWall, Palo Alto Networks, SIEM solutions, SASE, SD-WAN, endpoint security, and threat detection platforms.
Key Responsibilities
- Design, deploy, and manage enterprise network security solutions - Configure and administer Fortinet, SonicWall, and Palo Alto firewalls - Implement and maintain VPNs, IPS/IDS, web filtering, NAT, ACLs, and segmentation policies - Monitor security events using SIEM, XDR, and SOC monitoring platforms - Investigate security incidents, perform threat analysis, and support incident response activities - Manage firewall policies, security rules, and compliance controls - Implement Zero Trust Network Access (ZTNA) and identity-based security controls - Support cloud security initiatives across AWS, Azure, and hybrid infrastructure - Configure and support SD-WAN and Secure Access Service Edge (SASE) solutions - Conduct vulnerability assessments and remediation activities - Collaborate with infrastructure, cloud, and application teams to secure enterprise environments - Maintain security documentation, diagrams, SOPs, and audit records - Participate in on-call rotations and critical incident handling - GPU East-West and North-South traffic control and security - AI networking and security integration expertise - Understanding of AI infrastructure design and reference architectures - SOP and runbook development and maintenance - Incident, problem, and capacity management - Business continuity and disaster recovery planning for AI workloads - Proactive risk identification and mitigation to avoid business impact - Compliance with industry frameworks and standards such as NIST, ISO, etc.
Required Skills & Technologies
Firewall & Network Security
- Fortinet FortiGate - SonicWall - Palo Alto Networks - Check Point (preferred) - Cisco Firepower / ASA - VPN Technologies (IPSec / SSL VPN) - IDS/IPS - Web Application Firewall (WAF) - NAC (Network Access Control)
Modern Security Technologies
- Zero Trust Architecture (ZTA) - ZTNA (Zero Trust Network Access) - SASE (Secure Access Service Edge) - SD-WAN Security - SSE (Security Service Edge) - CASB (Cloud Access Security Broker) - Micro-segmentation - Secure Remote Access Solutions
SIEM, SOC & Threat Detection
Experience with one or more:
- Splunk - QRadar - Microsoft Sentinel - LogRhythm - ArcSight - Elastic SIEM
Knowledge of:
- SOC operations - Threat hunting - Log correlation - MITRE ATT&CK framework - Incident response - Threat intelligence integration
Cloud & Infrastructure Security
- AWS Security - Microsoft Azure Security - Hybrid cloud networking - Cloud firewall management - Security Groups / NSGs - Identity & Access Management (IAM)
Endpoint & Advanced Security
- EDR/XDR platforms - CrowdStrike - Microsoft Defender - SentinelOne - Endpoint hardening - DLP (Data Loss Prevention) - Email security solutions
Networking Fundamentals
Strong understanding of:
- TCP/IP - Routing & Switching - VLANs - BGP / OSPF - DNS / DHCP - Load Balancing - Network troubleshooting
Automation & Scripting (Preferred)
- Python - PowerShell - Bash scripting - Security automation - SOAR platforms
Preferred Certifications
- Fortinet NSE / FCP - Palo Alto PCNSA / PCNSE - CCNP Security - CISSP - CEH - CompTIA Security+ - Microsoft SC Certifications - AWS Security Specialty
Education
Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field preferred.
Soft Skills
- Strong analytical and troubleshooting skills - Ability to work in high-pressure environments - Excellent communication and stakeholder management - Strong documentation and reporting abilities - Proactive mindset with focus on continuous improvement
Text as published by Uvation. We don't edit postings; apply and ask questions on the employer's site.