Description

Required Skills:

Strong understanding of network security principles and solutions, including Firewalls (Palo Alto, Checkpoint), Load Balancers (F5), IPS, proxies, RAS, DNS, Certificates

Experience with network security products such as Bluecoat, Pulse Secure, HAProxy, Squid, PFSense, etc.

Familiarity with automation tools and scripting languages such as Ansible, Python, Chef for deployment and management

Knowledge of virtualization platforms including Docker, OpenShift, Kubernetes, VMware ESXi, KVM, OpenStack

Understanding of cloud network security solutions and services

Preferred Skills:

Experience with license management for network security products

Exposure to open-source security solutions and service mesh architecture

Overall Responsibilities

Evaluate, implement, and support network security solutions within enterprise environments, including NGFWs, IDS/IPS, proxies, load balancers, and related products

Lead the development and maintenance of secure network architectures aligned with organizational standards

Manage platform operational stability, including performance, security, and incident management

Research and stay updated on product releases, security best practices, and emerging threats to inform product backlog and deployment strategy

Enforce and continuously improve security standards, principles, and controls across all infrastructure components

Collaborate with infrastructure, architecture, and security teams to develop scalable, resilient, and cost-effective solutions

Oversee lifecycle management of security devices and applications, including patching, upgrades, and redundancy planning

Provide support during escalations, support Level 3 incident management, and contribute to on-call rotation as needed

Mentor junior team members and contribute to standardization efforts across the organization

Technical Skills (By Category)

Networking & Security Principles:

Essential: Firewalls (Palo Alto, Checkpoint), Load balancers (F5), IDS/IPS, Proxy solutions, Certificates

Preferred: Cloud security tools, Web Application Firewalls (WAFs)

Automation & Scripting:

Essential: Ansible, Python scripting for automation and platform management

Preferred: Chef, other configuration management tools

Virtualization & Cloud:

Essential: VMware, KVM, OpenStack, Docker, OpenShift for containerization and virtualization

Preferred: Cloud native network security services (Azure, AWS, GCP)

Monitoring & Optimization:

Familiarity with OEM, third-party monitoring tools, and performance optimization techniques

Protocols & Standards:

Knowledge of licensing, security standards, network segmentation, VPNs, and encryption protocols

Experience Requirements

5-12 years of experience in network security engineering within large enterprise environments, preferably financial institutions

Proven track record of deploying and managing large-scale, secure network infrastructures

Strong background in designing, implementing, and supporting firewalls, load balancers, and security appliances

Experience with automation, scripting, and orchestration tools to support platform efficiency

Knowledge of virtualization and cloud security solutions

Day-to-Day Activities

Design, implement, and support secure network architectures with up-to-date security controls

Conduct regular reviews, performance tuning, and patching of security devices and solutions

Troubleshoot security incidents, network outages, and performance issues

Collaborate with architecture, security, and infrastructure teams on strategic planning and compliance projects

Research new security threats, evaluate product releases, and update corporate standards accordingly

Mentor junior, support onboarding, and contribute to standardization and knowledge sharing initiatives

Qualifications

Bachelor’s degree in Computer Science, Information Technology, or related fields

Certifications such as CCNP Security, CISSP, Palo Alto Networks Certification, Checkpoint Certification, or equivalent are preferred

Continuous learning and relevant certifications in security, cloud, or virtualization technologies

Key Skills

Education

Bachelor's degree