Network Security lead

Job Summary:

The candidate should be a Network Security expert having in-depth knowledge and expertise in configuring and maintaining large enterprise firewalls from vendors such as Fortinet, Palo Alto & Cisco. S/he should have hands-on experience on cloud network security environments like GCP, AWS etc., and experience on handling on technologies such as VPN, WAF, NAC and proxies. S/he would be part of the Network Security team in Chennai – supporting with the design, setup, configuration & troubleshooting of all the network security components located across multiple regions and countries & in the cloud environment. Overall experience – around 4 to 6 years.

Responsibilities:

• Design and architect end-to-end AI solutions tailored to meet business objectives and requirements in the procurement domain.
• Overall, the job requires supporting the firewalls and other network security components Client’s environment located across various regions and countries.
• Supporting the setup, upgrade and migration of firewalls, VPN, web proxies etc.
• Support the cloud team to harden the network security posture on Cloud by leveraging NSGs, VPN, 3rd party firewalls, Cloud WAF.
• Analyze the new requirements based on input from various IT teams and provide solutions to meet the business requirements while maintaining the security posture of the enterprise.
• Identify opportunities for strengthening network security posture in the datacenter, regions, and cloud.
• Support in performing Proof of Value / Concept (POV/POC) for evaluating capabilities / features of new products and technologies.

Profile Description:

• Level 2-3 support of firewall technologies includes Fortinet firewalls, Palo Alto Firewalls, Google Cloud, AWS firewalls & other next-gen firewalls.
• Hands-on experience on centralized management of firewalls through Panorama, Forti-Manager etc.,
• Working knowledge on handling security related issues on cloud environments primarily on GCP, AWS, etc.,
• Hands-on experience handling implementation and troubleshooting of applications onboarded on WAF. Product based experience on Imperva, Cloudflare, GCP, Amazon WAF would be value added.
• Must have experience on handling Zscaler web proxy environment.
• Must have experience on handling Cloud networking environment either on GCP, AWS handling on NSG, Application Gateway, Load Balancer, Peering etc.
• Must have experience in handling and troubleshooting Client to site VPN environment.
• Must have experience analyzing and implementing complex firewall rules on security devices (FortiGate, Palo Alto, AWS & GCP native Firewalls).
• Demonstrated ability to analyze network traffic flows to reverse-engineer the required firewall ports and rules to allow secure access of applications
• Strong technical ability to troubleshoot firewall problems in a large enterprise involving complex network application flows between multiple hosts spanning multiple firewalls/security zones and different geographic locations
• A comprehensive knowledge of IP networking and network security including Intrusion Detection, DMZ, encryption, IPsec, SSL VPNs, MPLS/VPN, Site to Site VPN tunnels, SSL/VPN, proxy services etc.
• Must have strong analytical and problem-solving skills and a solid understanding of how to troubleshoot connectivity and performance issues that involve firewalls, MPLS network connectivity and applications.
• Must have experience on handling NAC (Network Access/Admission Control).
• Other security components are value added like DNS security, MFA etc.,
• Good hands-on experience in creating network diagrams, Network architecture diagram, Schematic diagrams in using MS Visio.
• Able to support on night shifts based on client requirements.