Firewall and WAF - L1 Engineer

About the Role

We are looking for Level 1 Engineer for our Device Management Team, having 2 + years of experience in Device Management. The team member will be responsible for the administration of the Security Devices like Next Gen Firewall and WAF.He should be well versed in the Change, Incident Management, Monitoring, Alerting processes. He should be ready to work in 24x7 shifts.

Key Responsibilities:

Monitoring & Alert Management:

• Monitor real-time dashboards, logs, and alerts from firewalls and WAF platforms.
• Respond to alerts, perform initial analysis, and log incidents/tickets in the ITSM system (e.g., ServiceNow).
• Validate security events and escalate critical incidents to the L2 team per SOP.
• Ensure SLA adherence for incident response and BAU tasks.

Firewall Operations (L1 Scope):

• Perform routine health checks of firewall devices (e.g., Fortinet, Palo Alto, Cisco ASA).
• Assist in basic configuration verification and rule monitoring.
• Report link failures, hardware status, and CPU/memory issues to relevant teams.

WAF Operations (L1 Scope):

• Monitor WAF traffic and identify false positives or attack patterns (e.g., SQL injection, XSS).
• Perform first-level triage on WAF rule blocks and raise change requests if tuning is needed.
• Track and document WAF logs, rule hits, and threat activity for analysis.

Incident & Problem Management:

• Respond to firewall-related incidents as per SLA timelines.
• Conduct initial troubleshooting for firewall issues and escalate to L2/L3 teams when necessary.
• Coordinate with network/security teams for resolution of firewall-related problems.

BAU Operations & Maintenance:

• Support routine BAU tasks like device reachability checks, scheduled backups, and report generation.
• Assist with change implementations by preparing devices or reviewing change windows.
• Ensure compliance with shift handover procedures and documentation.

Reporting & Documentation:

• Maintain logs and reports on firewall activities, incidents, and configurations.
• Prepare reports on security incidents, policy violations, and performance trends.
• Document troubleshooting steps and resolutions for knowledge base improvement.

Basic Qualifications:

• Degree in any of the following B.Tech/BE
• 3 to 5 years of experience 
• Good understanding of Incident Management, Change Management and Problem Management
• Good Understanding of ITIL concepts  

Preferred Qualifications

• Bachelor of Technology degree in computer science or information technology
• ITIL Foundation
• Experience with working in shift hours and handling multiple customer deployments.