TECHNICAL LEAD - Data Network Security - Firewalls

Job description

• Excellent communication skills. • Provide L3 support for complex security incidents, escalations, and high     severity outages across multi-vendor firewall environments. • Deep hands on expertise with Cisco FTD/FMC, including IPS and                     application control policies, NAT, VPN, SSL decryption, and advanced           troubleshooting. • Strong experience with Cisco Meraki MX security appliances, SD-WAN,           Auto-VPN, content filtering, and cloud-managed security operations. • Advanced configuration and troubleshooting of Fortigate firewalls,                 including policies, NAT, IPS, SSL inspection, SD-WAN, and central                     management via Forti-Manager & Fort-iAnalyzer. • Skilled in Palo Alto Networks firewalls (App-ID, User-ID, Threat                         Prevention, URL Filtering, NAT, Global Protect, Panorama). • Expert-level support for Sophos XG/UTM firewalls, ATP, web/app                       filtering, and  technologies. • Strong working knowledge of Checkpoint, SmartConsole, IPS, identity         awareness, cluster-XL, and policy optimization. • Perform advanced troubleshooting of IPSec/SSL VPN, intersite    connectivity, certificate issues, and complex security policies. • Conduct in-depth packet capture & traffic flow analysis using tools like         Wireshark, tcp dump, and vendor-specific debugs. • Experience with IDS/IPS tuning, threat signatures, false?positive reduction, and           security event correlation. • Implement and optimize security policies, micro-segmentation, and Zero    Trust architecture principles. • Work closely with SOC, network, and cloud teams on threat investigations, RCA, and permanent corrective actions. • Execute firewall upgrades, migrations, rule base reviews, and best-                practice compliance (NIST, ISO 27001). • Create and maintain detailed documentation, runbooks, topology                  diagrams, and change control packages. • Mentor L1/L2 teams and support continuous improvement of security          operations