Network Security Engineer

Job Overview We are looking for an experienced Network Security Engineer to design, implement, monitor, and support enterprise security infrastructure across on-premises, cloud, and hybrid environments. The ideal candidate should possess strong expertise in next-generation firewalls, SIEM platforms, cloud security, Zero Trust architecture, and modern cybersecurity operations. The role requires hands-on experience with technologies such as Fortinet, SonicWall, Palo Alto Networks, SIEM solutions, SASE, SD-WAN, endpoint security, and threat detection platforms. Key Responsibilities Design, deploy, and manage enterprise network security solutions Configure and administer Fortinet, SonicWall, and Palo Alto firewalls Implement and maintain VPNs, IPS/IDS, web filtering, NAT, ACLs, and segmentation policies Monitor security events using SIEM, XDR, and SOC monitoring platforms Investigate security incidents, perform threat analysis, and support incident response activities Manage firewall policies, security rules, and compliance controls Implement Zero Trust Network Access (ZTNA) and identity-based security controls Support cloud security initiatives across AWS, Azure, and hybrid infrastructure Configure and support SD-WAN and Secure Access Service Edge (SASE) solutions Conduct vulnerability assessments and remediation activities Collaborate with infrastructure, cloud, and application teams to secure enterprise environments Maintain security documentation, diagrams, SOPs, and audit records Participate in on-call rotations and critical incident handling Required Skills & Technologies Firewall & Network Security Fortinet FortiGate SonicWall Palo Alto Networks Check Point (preferred) Cisco Firepower / ASA VPN Technologies (IPSec / SSL VPN) IDS/IPS Web Application Firewall (WAF) NAC (Network Access Control) Modern Security Technologies Zero Trust Architecture (ZTA) ZTNA (Zero Trust Network Access) SASE (Secure Access Service Edge) SD-WAN Security SSE (Security Service Edge) CASB (Cloud Access Security Broker) Micro-segmentation Secure Remote Access Solutions SIEM, SOC & Threat Detection Experience with one or more: Splunk QRadar Microsoft Sentinel LogRhythm ArcSight Elastic SIEM Knowledge of: SOC operations Threat hunting Log correlation MITRE ATT&CK framework Incident response Threat intelligence integration Cloud & Infrastructure Security AWS Security Microsoft Azure Security Hybrid cloud networking Cloud firewall management Security Groups / NSGs Identity & Access Management (IAM) Endpoint & Advanced Security EDR/XDR platforms CrowdStrike Microsoft Defender SentinelOne Endpoint hardening DLP (Data Loss Prevention) Email security solutions Networking Fundamentals Strong understanding of: TCP/IP Routing & Switching VLANs BGP / OSPF DNS / DHCP Load Balancing Network troubleshooting Automation & Scripting (Preferred) Python PowerShell Bash scripting Security automation SOAR platforms Preferred Certifications Fortinet NSE / FCP Palo Alto PCNSA / PCNSE CCNP Security CISSP CEH CompTIA Security+ Microsoft SC Certifications AWS Security Specialty Education Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field preferred. Soft Skills Strong analytical and troubleshooting skills Ability to work in high-pressure environments Excellent communication and stakeholder management Strong documentation and reporting abilities Proactive mindset with focus on continuous improvement