Network Engineer III - IN (Palo Alto & FortiGate)

Job description

About Rackspace Cyber Defence Rackspace Cyber Defence is our next generation cyber defence and security operations capability that builds on 20+ years of securing customer environments to deliver proactive, risk-based, threat-informed and intelligence driven security services. Our purpose is to enable our customers to defend against the evolving threat landscape across on-premises, private cloud, public cloud and multi-cloud workloads. Our goal is to go beyond traditional security controls to deliver cloud-native, DevOps-centric and fully integrated 24x7x365 cyber defence capabilities that deliver a proactive , threat-informed , risk-based , intelligence-driven approach to detecting and responding to threats. Our Mission Is To Help Our Customers • Proactively detect and respond to cyber-attacks – 24x7x365. • Defend against new and emerging risks that impact their business. • Reduce their attack surface across private cloud, hybrid cloud, public cloud, and multi-cloud environments. • Reduce their exposure to risks that impact their identity and brand. • Develop operational resilience. • Maintain compliance with legal, regulatory and compliance obligations. Key Accountabilities • Act as the highest level of technical escalation for complex network security and cloud security incidents across customer environments. • Provide expert-level support and troubleshooting for Palo Alto, Fortinet, Azure networking, and hybrid network security infrastructures and architectures. • Lead technical resolution of critical (P1/P2) incidents and major service outages, driving recovery activities and stakeholder communications. • Perform deep-dive Root Cause Analysis (RCA) and recommend permanent corrective and preventive actions to improve service stability. • Design, implement, and optimize secure network security architectures for customer environments across cloud, on-premises, and hybrid deployments. • Lead customer onboarding activities involving complex network designs, large-scale migrations, and security transformation initiatives. • Review and approve firewall policies, network segmentation strategies, VPN designs, security controls, and architecture changes. • Provide governance and technical oversight for major changes, upgrades, migrations, and platform lifecycle management activities. • Design and implement scalable solutions utilizing: • Palo Alto VM-Series and Panorama • FortiGate VM and FortiManager • Azure Networking and Security Services • Hybrid Connectivity Solutions • Lead troubleshooting and optimization of: • IPsec & Remote VPNs • Static and dynamic routing • SD-WAN & BGP • Azure Routing • Azure Load Balancing • Network Performance Issues • Security Policy Conflicts • Drive continuous service improvement initiatives through automation, standardization, and operational excellence. • Develop and maintain architecture standards, operational runbooks, design documentation, and knowledge repositories. • Collaborate with Microsoft, Palo Alto, Fortinet, and other vendors for product escalations and advanced troubleshooting. • Evaluate emerging security technologies and recommend enhancements to customer security posture. • Act as a technical mentor for L1 and L2 engineers, providing coaching, reviews, and knowledge transfer sessions. • Participate in customer technical governance meetings, architecture reviews, and strategic planning discussions. • Support after-hours critical incidents, major projects, and planned maintenance activities when required. Skills & Experience Mandatory Technical Expertise • 8+ years of hands-on experience in Network Security Engineering, Security Operations, or Security Architecture roles. • Expert-level knowledge of: • Palo Alto Networks VM-Series Firewalls • Panorama Management Platform • FortiGate VM Firewalls • FortiManager • Azure Networking and Security Services Advanced Azure Expertise • Deep understanding of: • Virtual Networks (VNets) • Virtual WAN (vWAN) • Route Tables • Network Security Groups (NSGs) • Azure Load Balancer • Application Gateway (WAF) • Azure Firewall • VPN Gateway • ExpressRoute • Azure Route Server • Private Endpoints • Hub-and-Spoke Architectures • Zero Trust Network Design Network Security Architecture • Extensive experience designing and implementing: • Enterprise Network Security Architectures • Cloud-Native Security Solutions • Hybrid Connectivity Solutions • Segmentation and Micro-Segmentation Strategies • Zero Trust Security Models • Secure Internet Egress Architectures • Multi-Cloud Connectivity Solutions Advanced Operational Skills • Expert troubleshooting experience in: • IPsec VPN • SSL VPN • Dynamic Routing • NAT • URL & APP-ID • Feature and Function optimizations • High Availability Clusters • Performance Optimization • Experience leading: • Firewall migrations • Cloud transformation projects • Network modernization initiatives • Security platform upgrades and refresh programs Automation & Engineering • Good to have experience with automation and Infrastructure-as-Code solutions such as: • PowerShell • Python • Terraform • ARM/Bicep Templates • Azure Automation • Ability to design automated operational workflows and reduce manual effort through scripting and orchestration. Certifications (Preferred) Palo Alto Networks • Palo Alto Networks Certified Network Security Engineer (PCNSE) • Palo Alto Networks Cybersecurity Certified Expert (PCCSE) Fortinet • Fortinet NSE 4+ / FCP Network Security Microsoft • Microsoft Certified: Azure Network Engineer Associate (AZ-700) • Microsoft Certified: Azure Fundamentals (AZ-900) • Microsoft Certified: Azure Security Engineer Associate (AZ-500) • Azure Solutions Architect Expert (AZ-305) Additional Security Certifications (Good to Have) • CISSP • CCSP • CCNP Security • CCIE Security Additional Security Certifications (Good to Have) -