Description

You will design, deploy, and manage enterprise network security infrastructure, owning the lifecycle of firewalls, identity access systems, load balancers, and core switching fabric. You serve as the Tier 3 escalation point for complex outages and mentor junior engineers.

Responsibilities

• Design and manage Palo Alto NGFWs, including GlobalProtect VPN and Threat Prevention profiles.
• Administer Aruba ClearPass for NAC, profiling, and guest access integration with wireless and switching fabrics.
• Architect and maintain Avi Load Balancers for high availability, GSLB, and WAF protection.
• Manage enterprise-scale Route and Switch environments, focusing on Edgecore hardware and Infoblox DDI.
• Automate policy changes, perform risk analysis, and ensure compliance using FireMon.

Required Skills

• 10+ years in Network Security Engineering, with at least 3 years in a Senior or Lead capacity.
• Advanced proficiency in Palo Alto Networks (Panorama, WildFire, GlobalProtect).
• Expertise in Aruba ClearPass Policy Manager and 802.1X protocols.
• Strong experience with Avi Networks (NSX ALB) or similar SD-LBs.
• Deep knowledge of BGP, OSPF, and EVPN-VXLAN with hands-on Edgecore or OCP-compliant hardware.
• Mastery of Infoblox for IP address management and DNS security.
• Experience using FireMon for rule cleanup, policy auditing, and compliance reporting.
• Strong familiarity with ServiceNow ITSM frameworks and Agile methodologies.

Preferred Skills

• PCNSE (Palo Alto Certified Network Security Engineer) or ACCP (Aruba Certified ClearPass Professional).
• CCNP Security or Routing & Switching certification.

Key Skills

Education

Bachelor's degree