ASA firewall - SME

Job Summary:

We are seeking a highly skilled and experienced SME Level Cisco ASA Firewall Engineer to join our Network Security team. The ideal candidate will have deep expertise in managing and troubleshooting security infrastructure, with a primary focus on Checkpoint firewalls, Cisco ASA firewalls, and Zscaler security solutions. You will be responsible for the design, implementation, optimization, and escalation support for our global security platforms, ensuring the integrity and protection of our network and systems.

---

Key Responsibilities:

Provide L4-level support for Cisco ASA firewalls, including configuration, troubleshooting, and performance tuning.

Handle escalated incidents and work closely with SOC teams to remediate firewall-related alerts.

Experience in Checkpoint and Zscaler ZIA, ZPA is added advantage

Configure and maintain Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) for secure web and application access.

Perform root cause analysis of complex security incidents and recommend corrective actions.

Participate in the design and implementation of new security architectures and network segmentation projects.

Conduct regular health checks, system updates, firmware upgrades, and performance tuning of security devices.

Collaborate with SOC, NOC, IT infrastructure, and application teams to enforce security policies.

Create and maintain detailed documentation including network diagrams, SOPs, and technical runbooks.

Participate in audit support, compliance assessments, and penetration testing remediation.

---

Requirements:

Technical Skills:

Cisco ASA: Expertise in firewall policies, NAT, ACLs, VPN tunnels (IPSec/SSL), and troubleshooting.

Expert in Cisco ASA (5500-X series), Firepower Threat Defense (FTD), and ASDM/CLI configuration.

Experience with Cisco Firepower Management Center (FMC) and intrusion prevention features.

Zscaler: Proficient in ZIA and ZPA setup, policy configuration, troubleshooting Zscaler Client Connector, and integration with IdPs

Solid understanding of TCP/IP, routing protocols, and layer 2/3/7 firewall concepts.

Experience with security monitoring, logging, and SIEM integration (e.g., Splunk, QRadar).

Familiarity with scripting or automation tools (e.g., Python, Ansible) is a plus.

Certifications (Preferred):

Cisco CCIE Security

Checkpoint CCSE

Zscaler Certified Professional (ZCP / ZIA / ZPA)

Other relevant certifications (CISSP, CEH, GIAC) are a plus

Experience:

10+ years in network and security engineering roles

Minimum 5 years in a SME Level support or senior engineering capacity

Experience in large-scale enterprise environments with global operations

Soft Skills:

Strong analytical and problem-solving skills

Excellent verbal and written communication

Ability to handle high-pressure incident response scenarios

Collaborative and team-oriented mindset

Ready to support in flexible shift timings