Infrastructure Security Engineer

Position Summary:

We are looking for Level 2 Engineer for our Device Management Team, having 4+ years of experience in Device Management. The team member will be responsible for the administration of the Security Devices like Next Gen Firewall. He should be well versed in the Change and Incident Management process. He should be ready to work in 24 X 7 shift. 

Key Roles & Responsibilities:

Firewall Operations & Troubleshooting:

• Monitor, manage, and optimize firewall performance, health, and security.
• Perform advanced troubleshooting of firewall-related issues, working closely with L1 and L3 teams.
• Investigate security incidents, network anomalies, and connectivity issues.
• Fine-tune firewall rules, policies, and configurations for performance and security improvements.
• Work on packet captures and traffic analysis to diagnose network security issues.

Rule & Policy Management:

• Review, implement, and modify firewall rules while ensuring security and compliance standards.
• Conduct firewall rule audits and remove redundant or obsolete rules.
• Manage access control policies, VPN configurations, and segmentation policies.
• Ensure compliance with organizational and regulatory security guidelines.

Incident & Change Management:

• Act as an escalation point for L1 engineers and assist in resolving complex firewall issues.
• Participate in Root Cause Analysis (RCA) for recurring firewall incidents and recommend fixes.
• Handle firewall upgrades, patches, and firmware updates as per change management procedures.
• Support IT security and compliance teams in conducting risk assessments and vulnerability remediation.

BAU Operations & Automation:

• Implement automation scripts for firewall monitoring and reporting.
• Optimize firewall logging, alerting, and monitoring for proactive security management.
• Coordinate with vendors and OEM support teams for hardware/software troubleshooting.

Documentation & Reporting:

• Maintain up-to-date documentation on firewall configurations, rule changes, and security incidents.
• Prepare reports on firewall performance, threat activities, and policy violations.
• Provide training and mentorship to L1 engineers on firewall best practices.

Basic Qualifications

• Bachelor’s degree in IT, Computer Science, or a related field.
• Relevant security/network certifications such as

  CCNP Security, Fortinet NSE 3+, Palo Alto PCNSA/PCNSE, Check Point CCSA/CCSE, Juniper JNCIS-SEC

  , or equivalent.
• Strong verbal and written communication and interpersonal skills.
• Strong analytical and problem-solving abilities.
• Ability to work with minimal levels of supervision or oversight.
• Ability to work in a 24x7 environment (if required) and manage escalations effectively.

Preferred Qualifications

• ITIL Foundation
• Experience in working in shifts and hands on experience with ITIL framework
• Worked on multiple clients’ environments and deployment