Assistant Manager - Captive Operations

Job Description – L2 Network Security Engineer (Firewall, WAF & DDoS)

Experience – 4 to 5 Years

Location – Powai (WFO)

Shift : 24x7

Role Summary

We are seeking an experienced L2 Network Security Engineer to provide expert administration, troubleshooting, optimization, and lifecycle management of enterprise network security solutions, including firewalls, WAF, DDoS protection, SSL Visibility, API Security, and Enterprise Threat Management (ETM). The role involves serving as the technical SME, driving security architecture improvements, resolving complex issues, and ensuring high availability and compliance.

Key Responsibilities

• Administer, configure, and troubleshoot Check Point, Palo Alto, and Fortinet FortiGate firewalls in enterprise environments.

• Manage Web Application Firewall (Imperva/F5), DDoS protection (Radware/Arbor), SSL Orchestrator (SSLO), API Security, and Enterprise Threat Management (ETM) solutions.

• Design, review, and optimize firewall policies; identify and remove unused, redundant, shadowed, and risky rules using AlgoSec Firewall Analyzer.

• Perform firmware/OS upgrades, patch management, high availability (HA) implementation, disaster recovery (DR), and lifecycle management of security platforms.

• Lead complex troubleshooting, root cause analysis (RCA), performance tuning, and critical incident resolution.

• Implement security hardening, best practices, and compliance recommendations across network security infrastructure.

• Support change management, migration activities, and deployment of new security technologies.

• Collaborate with SOC, Network, Cloud, Application, and OEM teams to ensure secure service delivery.

• Develop SOPs, technical documentation, knowledge articles, and mentor other engineers.

• Ensure compliance with organizational security policies, regulatory requirements, and SLA/KPI commitments.

Required Technical Skills

• Firewalls: Check Point, Palo Alto, Fortinet FortiGate

• WAF: Imperva, F5 Advanced WAF

• DDoS: Radware DefensePro, Arbor

• Firewall Policy Management: AlgoSec Firewall Analyzer/Firewall Manager

• SSL Visibility: F5 SSL Orchestrator (SSLO)

• API Security: Imperva API Security, F5 Distributed Cloud/API Security, or equivalent

• Networking: TCP/IP, Routing, Switching, NAT, VPN, IPSec, BGP, OSPF, VLANs, High Availability

• Operating Systems: Linux and Windows

Qualification and Certification :

1. Should be BE/B.Tech/BCA/MCA/BSC (IT/Computer related technologies)

2. Should have CEH/ECIH/CHFI/CISM/Any SIEM Technical certification/Any Firewall Technical Certification/or any other industry related certificate.