TECHNICAL LEAD - Data Network Security - Firewalls

Job description

- Excellent communication skills. - Provide L3 support for complex security incidents, escalations, and high     severity outages across multi-vendor firewall environments. - Deep hands on expertise with Cisco FTD/FMC, including IPS and                     application control policies, NAT, VPN, SSL decryption, and advanced           troubleshooting. - Strong experience with Cisco Meraki MX security appliances, SD-WAN,           Auto-VPN, content filtering, and cloud-managed security operations. - Advanced configuration and troubleshooting of Fortigate firewalls,                 including policies, NAT, IPS, SSL inspection, SD-WAN, and central                     management via Forti-Manager & Fort-iAnalyzer. - Skilled in Palo Alto Networks firewalls (App-ID, User-ID, Threat                         Prevention, URL Filtering, NAT, Global Protect, Panorama). - Expert-level support for Sophos XG/UTM firewalls, ATP, web/app                       filtering, and  technologies. - Strong working knowledge of Checkpoint, SmartConsole, IPS, identity         awareness, cluster-XL, and policy optimization. - Perform advanced troubleshooting of IPSec/SSL VPN, intersite    connectivity, certificate issues, and complex security policies. - Conduct in-depth packet capture & traffic flow analysis using tools like         Wireshark, tcp dump, and vendor-specific debugs. - Experience with IDS/IPS tuning, threat signatures, false?positive reduction, and           security event correlation. - Implement and optimize security policies, micro-segmentation, and Zero    Trust architecture principles. - Work closely with SOC, network, and cloud teams on threat investigations, RCA, and permanent corrective actions. - Execute firewall upgrades, migrations, rule base reviews, and best-                practice compliance (NIST, ISO 27001). - Create and maintain detailed documentation, runbooks, topology                  diagrams, and change control packages. - Mentor L1/L2 teams and support continuous improvement of security          operations