L1 Network Security Engineer | Firewall Experience

Job Description

Position : L1 Network Security Engineer Payroll: Renovision Automation Service Pvt LtdLocation : AhmedabadShift : Rotational shiftsBudget : 5 LPA CTC Job Summary:We are seeking a skilled L1 Network Security Engineer to support, manage, and troubleshoot network security devices and configurations across multiple platforms including Palo Alto Networks, Check Point, Fortinet (FortiGate SD-WAN), and Cisco ASA. The candidate will work closely with the L2/L3 team and clients to ensure optimal security infrastructure performance and incident resolution. Key Responsibilities:· Palo Alto Networkso Manage and troubleshoot firewall policies, objects, NAT, and security profiles.o Configure and maintain routing protocols (OSPF, BGP, EIGRP).o Implement and monitor VPNs (site-to-site, remote access).o Manage URL filtering and threat prevention features. · Check Point Firewallso Configure and support VPN tunnels.o Monitor and maintain IPS and Anti-Bot/Anti-Virus (APT) functionalities.o Apply policy updates, monitor logs, and escalate complex issues as needed. · Fortinet FortiGate (SD-WAN)o Configure and manage FortiGate firewalls including SD-WAN policies and rules.o Handle WAN link health monitoring, load balancing, and failover configuration.o Monitor UTM features and log analysis. · Cisco ASAo Manage firewall rules, NAT, and VPN (IPsec/SSL) configuration.o Perform basic troubleshooting and support failover scenarios.o Maintain configuration backups and policy documentation. · Participate in security audits and compliance-related tasks as required.· Proactively monitor device health, logs, and alerts using management tools.· Perform regular policy and configuration reviews, updates, and backups.· Assist in incident response and RCA related to firewall or security events.· Apply firmware/OS upgrades and security patches across devices.· Document configurations, changes, and troubleshooting steps in detail.· Coordinate with L2/3 teams and OEM support (TAC) for escalated issues.· Work in shifts or on-call rotations as per business needs.· Financial Domain Knowledge: Candidates with past working experience in financial companies (preferably retail banking) are preferred. Technical Skills Required:· Hands-on experience with:o Palo Alto firewalls (PAN-OS, Panorama)o Check Point (SmartConsole, Gaia OS)o Fortinet FortiGate (FortiOS, SD-WAN features)o Cisco ASA (ASDM, CLI)· Strong knowledge of:o Routing protocols (OSPF, BGP, EIGRP)o VPN technologies (IPsec, SSL)o Web/content filtering, IPS/IDS, and APT protectiono Strong understanding of IPS/WAF/DNS/SSLO/load balancer. · Technical Skills:o Good level of understanding of DCLAN and routing switching technologies.o Familiar with security best practices, logging, and STEM integration. Qualifications:· Bachelor’s degree in Computer Science, IT, or a related field.· Vendor certifications preferred:o PCNSE (Palo Alto)o CCSA/CCSE (Check Point)o NSE 4 or above (Fortinet)o CCNP Security or CCNA Security (Cisco)· Minimum 1-2 years of hands-on experience in a network security operations or support role. Soft Skills:· Strong problem-solving and analytical skills.· Excellent communication and documentation abilities.· Willingness to work in rotational shifts or on-call support, if needed.· Team-oriented and customer-focused attitude. RegardsKirti Rustagihr1@raspl.com