Cyber Security Device Management - Engineer (L2)

This Role will be responsible for managing firewalls and network security devices for multiple clients which involves

• Plan, prepare and implement firewall, network security devices change and incidents that are requested by clients as per the Change Management framework defined by the company.
• Troubleshooting and resolving security, service and devices related incidents, and provide RCAs whenever required as per Incident Management framework defined by company.
• Deploy, and configuration different network solutions as per the client requirements.
• Mentor, audit and manage Associates and Engineers in the team.
• Handle internal and client escalations effectively.
• Perform and present security and posture assessments on client and SHQ network devices as required.
• Perform peer reviews for all the Associate and Engineers work before implementation and conduct post assessments.
• Maintain and complete assigned tickets related to network issues, ensuring regular ticket updates and client communication as per the defined SLAs.
• Prepare/Present/Review daily/weekly/monthly reports as per client requirements.
• Participate in network lifecycle management for upgrades, hardware refreshes and any architectural updates as required.
• Ability to work in 24x7 environment with given responsibilities.
• Excellent communication skills are required for daily security operations.

Responsibilities:

• Ability to work independently and confidently on single or multiple projects.
• Will be responsible for the end-to-end delivery.
• Handling customer escalations, balancing customer expectations, and negotiating successful resolutions.
• Planning for firewall migration, optimization & new implementation.
• Prepare security design document CRD, HLD, LLD, migration & implementation plan.
• Help OEM to run POC & conduct post POC presentation.
• Assist and Guide Junior team members such as L0/L1 in day-to-day tasks.
• Escalating the issues in the timely manner to senior level or coordinating with TAC support to resolve the issues pro-actively.
• Plan and implement the changes as per the ITIL procedures.
• Perform Quarterly/Half-Yearly configuration Audit of Customer Firewalls.
• Prepare Weekly/Monthly Reports

Essential Skills:

• Good understanding of Routing Protocols (Static Routes / RIP / OSPF / BGP)
• Good understanding of Switching concepts (STP / VTP / L2 Loops / VLANs/ EtherChannel)
• Hands on experience on firewall like Cisco ASA, Palo Alto, FortiGate, Checkpoint, SonicWall
• Knowledge on Advanced Cybersecurity Solutions (CASB, DLP, WAF, Web Proxy)
• Good Understanding of Zero Trust or SASE solutions.
• Technically good in IPSEC tunnel creation and troubleshooting.
• Knowledge of any Remote access VPN, Clientless VPN
• Good Understanding of Packet flow for leading vendor firewalls
• Good understanding of Networking concepts such as NAT, ACL, VIP, QoS, Stateful Inspection etc.
• Existing knowledge of, and experience with public cloud platform (laaS/PaaS) features, capabilities, and best use for (Azure/AWS/GCP)

Additional Desired Skills:

• Strong interpersonal and presentation skills
• Ability to work with minimal levels of supervision or oversight
• Adherence to security policies
• Willingness to provide availability and support by understanding the criticality and responsibility of the business needs.
• Good knowledge of Windows/Linux OS and networking environments will be add-on.

Education Requirements & Experience:

• Experience - 3 to 6 Years

• Education: BE-Computer Science/IT OR MCA OR University degree equivalent

• Certification CheckPoint/Palo Alto/Cisco (ASA, RnS, Security)/ Fortinet/ Juniper Certified. (Any one or more is preferred.)