Zensar Technologies—Network Security Engineer SME

Job description

Description: Firewall Administration & Architecture - Deployment & Config: Install, configure, and maintain Palo Alto (PA-Series) and Fortinet (FortiGate) firewalls. - Policy Management: Design and audit firewall rule bases, security profiles, and NAT policies. - Centralised Management: Manage large-scale environments using Palo Alto Panorama and Fortinet FortiManager / FortiAnalyzer. - VPN Management: Establish and secure Site-to-Site IPsec VPNs and Remote Access VPNs (GlobalProtect, FortiClient). 2. Network Security Operations - Threat Mitigation: Configure advanced security features including IPS/IDS, URL filtering, Anti- - Upgrade & Patching: Perform routine firmware upgrades, hotfixes, and vulnerability patching. - Monitoring: Analyze security logs to detect anomalies, unauthorized access, or potential network breaches. - High Availability: Maintain redundant firewall clusters (HA Active/Passive and Active/Active topologies). Traffic Management & Core Network Services (DDI) - Application Delivery: Configure F5 BIG-IP LTM (Local Traffic Manager), including VIPs, Pools, Monitors, SSL offloading, and advanced iRules. - IPAM & DDI: Manage Infoblox Grid Manager to run high-availability DNS, DHCP, and IP Address Management (IPAM). - Network Automation: Maintain network health by automating IP allocations and DNS entries. Edge Architecture & WAN Edge - SD-WAN Fabric: Design, deploy, and optimize SD-WAN solutions (Fortinet Secure SD-WAN or Palo Alto Prisma SD-WAN) to replace traditional MPLS. - Traffic Steering: Define application-aware routing paths to guarantee performance for critical SaaS and cloud workloads. - Hybrid Connectivity: Maintain secure Site-to-Site IPsec VPN overlays across the SD-WAN fabric. Troubleshooting & Support - Incident Response: Act as a Tier 2/3 escalation point for complex network security issues and outages. - Packet Analysis: Use tools like Wireshark and built-in CLI packet captures to diagnose complex routing or traffic drops. - Performance Tuning: Monitor firewall CPU, memory, and session counts to optimize throughput Troubleshooting & Architecture - Tier 3 Escalation: Diagnose complex outages involving multi-vendor paths (e.g., F5 VIP to Firewall to SD-WAN edge). - Packet Diagnostics: Master packet capture tools (Wireshark, tcpdump) to resolve deep-layer routing, translation, or load-balancing issues. Requirements: Firewall Administration & Architecture - Deployment & Config: Install, configure, and maintain Palo Alto (PA-Series) and Fortinet (FortiGate) firewalls. - Policy Management: Design and audit firewall rule bases, security profiles, and NAT policies. - Centralised Management: Manage large-scale environments using Palo Alto Panorama and Fortinet FortiManager / FortiAnalyzer. - VPN Management: Establish and secure Site-to-Site IPsec VPNs and Remote Access VPNs (GlobalProtect, FortiClient). 2. Network Security Operations - Threat Mitigation: Configure advanced security features including IPS/IDS, URL filtering, Anti- - Upgrade & Patching: Perform routine firmware upgrades, hotfixes, and vulnerability patching. - Monitoring: Analyze security logs to detect anomalies, unauthorized access, or potential network breaches. - High Availability: Maintain redundant firewall clusters (HA Active/Passive and Active/Active topologies). Traffic Management & Core Network Services (DDI) - Application Delivery: Configure F5 BIG-IP LTM (Local Traffic Manager), including VIPs, Pools, Monitors, SSL offloading, and advanced iRules. - IPAM & DDI: Manage Infoblox Grid Manager to run high-availability DNS, DHCP, and IP Address Management (IPAM). - Network Automation: Maintain network health by automating IP allocations and DNS entries. Edge Architecture & WAN Edge - SD-WAN Fabric: Design, deploy, and optimize SD-WAN solutions (Fortinet Secure SD-WAN or Palo Alto Prisma SD-WAN) to replace traditional MPLS. - Traffic Steering: Define application-aware routing paths to guarantee performance for critical SaaS and cloud workloads. - Hybrid Connectivity: Maintain secure Site-to-Site IPsec VPN overlays across the SD-WAN fabric. Troubleshooting & Support - Incident Response: Act as a Tier 2/3 escalation point for complex network security issues and outages. - Packet Analysis: Use tools like Wireshark and built-in CLI packet captures to diagnose complex routing or traffic drops. - Performance Tuning: Monitor firewall CPU, memory, and session counts to optimize throughput Troubleshooting & Architecture - Tier 3 Escalation: Diagnose complex outages involving multi-vendor paths (e.g., F5 VIP to Firewall to SD-WAN edge). - Packet Diagnostics: Master packet capture tools (Wireshark, tcpdump) to resolve deep-layer routing, translation, or load-balancing issues. Responsibilities: Firewall Administration & Architecture - Deployment & Config: Install, configure, and maintain Palo Alto (PA-Series) and Fortinet (FortiGate) firewalls. - Policy Management: Design and audit firewall rule bases, security profiles, and NAT policies. - Centralised Management: Manage large-scale environments using Palo Alto Panorama and Fortinet FortiManager / FortiAnalyzer. - VPN Management: Establish and secure Site-to-Site IPsec VPNs and Remote Access VPNs (GlobalProtect, FortiClient). 2. Network Security Operations - Threat Mitigation: Configure advanced security features including IPS/IDS, URL filtering, Anti- - Upgrade & Patching: Perform routine firmware upgrades, hotfixes, and vulnerability patching. - Monitoring: Analyze security logs to detect anomalies, unauthorized access, or potential network breaches. - High Availability: Maintain redundant firewall clusters (HA Active/Passive and Active/Active topologies). Traffic Management & Core Network Services (DDI) - Application Delivery: Configure F5 BIG-IP LTM (Local Traffic Manager), including VIPs, Pools, Monitors, SSL offloading, and advanced iRules. - IPAM & DDI: Manage Infoblox Grid Manager to run high-availability DNS, DHCP, and IP Address Management (IPAM). - Network Automation: Maintain network health by automating IP allocations and DNS entries. Edge Architecture & WAN Edge - SD-WAN Fabric: Design, deploy, and optimize SD-WAN solutions (Fortinet Secure SD-WAN or Palo Alto Prisma SD-WAN) to replace traditional MPLS. - Traffic Steering: Define application-aware routing paths to guarantee performance for critical SaaS and cloud workloads. - Hybrid Connectivity: Maintain secure Site-to-Site IPsec VPN overlays across the SD-WAN fabric. Troubleshooting & Support - Incident Response: Act as a Tier 2/3 escalation point for complex network security issues and outages. - Packet Analysis: Use tools like Wireshark and built-in CLI packet captures to diagnose complex routing or traffic drops. - Performance Tuning: Monitor firewall CPU, memory, and session counts to optimize throughput Troubleshooting & Architecture - Tier 3 Escalation: Diagnose complex outages involving multi-vendor paths (e.g., F5 VIP to Firewall to SD-WAN edge). - Packet Diagnostics: Master packet capture tools (Wireshark, tcpdump) to resolve deep-layer routing, translation, or load-balancing issues.