Infrastructure Security Engineer-Firewall

Position Summary

Level 2 Engineer Device Management

Key Responsibilities

Firewall Operations & Troubleshooting

• Monitor and maintain the health and performance of firewalls.
• Troubleshoot complex firewall and network security issues.
• Perform traffic analysis, packet captures, and root cause investigations.
• Collaborate with L1/L3 teams for efficient incident resolution.

Rule & Policy Management

• Review, implement, and optimize firewall rules and access control policies.
• Conduct periodic audits to clean up obsolete or redundant rules.
• Manage VPNs, segmentation policies, and configuration baselines.

Incident & Change Management

• Act as L2 escalation point and support RCA for recurring incidents.
• Perform firmware upgrades, patches, and configuration changes.
• Follow ITIL-aligned incident and change management practices.

BAU Operations & Automation

• Develop or use automation scripts for monitoring/reporting.
• Improve firewall logging, alerting, and proactive incident detection.
• Coordinate with vendors/OEMs for hardware/software escalations.

Documentation & Reporting

• Maintain up-to-date documentation for device configurations and changes.
• Prepare regular performance, threat, and compliance reports.
• Mentor L1 engineers and contribute to knowledge sharing.

Basic Qualifications

• B.E./B.Tech in Computer Science/IT

  or equivalent master's degree.

• Certifications:

  At least one of the following:
• CCNP Security, NSE 3/4+, PCNSA/PCNSE, CCSA/CCSE, JNCIS-SEC.
• Solid understanding of firewall platforms (Palo Alto, Fortinet, Cisco, Check Point, etc.).
• Excellent troubleshooting, analytical, and communication skills.
• Ability to work independently and manage high-pressure incidents.
• Willingness to work in

  24x7 shifts

  (rotational).

Preferred Qualifications

• ITIL Foundation

  certified.
• Experience across multiple customer environments.
• Hands-on knowledge of ITIL-based operations including change/incident/problem management.
• Exposure to automation tools and scripting (e.g., Python, Ansible).