The posting
Responsibilities
- Manage enterprise firewall environments across Palo Alto, Fortinet FortiGate and Cisco ASA platforms, handling security configuration, traffic segmentation and controlled access between interconnected network environments.
- Implement and maintain Layer 3 and Layer 7 firewall policies, NAT translations and access control rules, ensuring appropriate traffic permissions across enterprise and branch networks.
- Analyse existing firewall rulebases, identify redundant or conflicting entries, and perform rule optimisation and configuration cleanup to strengthen network access controls.
- Configure and maintain Site-to-Site VPN, Remote Access VPN and IPsec tunnels, including troubleshooting encrypted connectivity between branch locations, enterprise networks and remote users.
- Investigate firewall-related connectivity and security incidents by correlating traffic logs, packet captures and network traces using Wireshark, TCPDump and native firewall diagnostic utilities.
- Monitor and investigate network security alerts through SIEM platforms, including Splunk, IBM QRadar and Microsoft Sentinel, supporting incident analysis and security event resolution.
- Execute firewall firmware upgrades, security patching, configuration reviews and rule changes, following controlled change procedures to minimise disruption to business-critical network services.
- Troubleshoot security and connectivity issues across firewall, VPN and WAN environments, identifying interactions between access policies, routing paths and encrypted network traffic.
- Support the integration of firewall controls with Cisco SD-WAN infrastructure, including controller-managed WAN edge environments and distributed enterprise site connectivity.
- Handle routing and network security interactions involving BGP, OSPF, VRF and MPLS PE-CE connectivity, particularly during WAN changes, migration activities and connectivity restoration.
Requirements
- Minimum 9 years of overall experience in enterprise network engineering, including atleast 4 years of hands-on experience in network security, firewall administration and security implementation across enterprise WAN environments.
- Hands-on configuration and administration experience in at least one of the following enterprise firewall platforms: Palo Alto, Fortinet FortiGate or Cisco ASA.
- Hands-on experience implementing Layer 3/Layer 7 firewall policies, NAT, ACLs, traffic filtering and firewall rulebase analysis and optimisation.
- Experience configuring and troubleshooting Site-to-Site VPN, Remote Access VPN and IPsec tunnels across multi-site enterprise networks.
- Practical experience in packet-level investigation and firewall traffic analysis using Wireshark, TCPDump and firewall logs.
- Experience monitoring and investigating security events through SIEM platforms such as Splunk, IBM QRadar or Microsoft Sentinel.
- Experience performing firewall firmware upgrades, security patch deployment, configuration maintenance and controlled firewall change implementations.
- Hands-on experience with Cisco SD-WAN infrastructure, including vManage, vSmart, vBond and cEdge/vEdge device provisioning and configuration.
- Implementation experience in BGP and OSPF routing, including VRF configuration, route maps and routing policy troubleshooting.
- Experience in MPLS PE-CE connectivity, WAN routing integration and troubleshooting network-level connectivity issues.
- Familiarity with Cisco ISR 4000, ASR 1000 or CSR1000v platforms and enterprise network management tools such as Cisco DNA Centre, Cisco PRIME or Cisco ISE.
- Cisco certifications in enterprise routing and switching or SD-WAN implementation, along with relevant firewall vendor certifications, will be preferred.
- Need to be available for on-call standby during the weekend.



