Network Security Engineer (Palo Alto / Fortinet / Zscaler)

Job Summary

We are seeking a highly skilled Network Security Engineer with strong hands-on experience in Palo Alto Firewalls, Fortinet/FortiGate, Cisco ACI, Zscaler, and enterprise network security management. The ideal candidate will be responsible for designing, implementing, securing, and supporting enterprise network security infrastructure while ensuring compliance with security standards and best practices.

Mandatory Skills & Experience

Network Security Engineering

• 5+ years of hands-on Network Security experience
• Strong understanding of Network Security Architecture and Frameworks
• Experience implementing security controls based on NIST and ISO 27001

Palo Alto Firewalls

• 5+ years of experience with Palo Alto Firewalls
• Design, Architecture, Configuration, Deployment, and Administration
• Security Policies, NAT, VPN, Logging, Threat Prevention
• Firewall Rule Creation and Optimization
• Firewall Upgrades and Migrations

Fortinet / FortiGate

• 5+ years of experience with Fortinet/FortiGate Firewalls
• Firewall Administration and Security Policy Management
• VPN Configuration and Troubleshooting
• Migration experience from Cisco ASA to Fortinet preferred

Cisco ACI

• 3+ years of Cisco ACI experience
• Network Fabric Administration
• Application-Centric Infrastructure Design

Zscaler

• 3+ years of experience with Zscaler
• ZIA and ZPA administration
• Secure Internet Access and Zero Trust implementation

Carbon Black

• 3+ years of experience with VMware Carbon Black
• Endpoint Protection and Threat Detection
• Incident Investigation and Response

Microsoft Defender

• Experience with Microsoft Defender Security Suite
• Endpoint Protection
• Threat Analytics and Security Monitoring

Routing & Switching

• 5+ years of experience in Enterprise Networking
• VLAN Configuration and Troubleshooting
• OSPF and BGP Routing
• Layer 2 and Layer 3 Networking
• Switch Replacement and Network Upgrades

Security Operations

• Firewall Log Analysis
• SOC Support and Incident Response
• Data Loss Prevention (DLP)
• Vulnerability Assessments
• Security Monitoring

SIEM & Monitoring Tools

• Splunk
• SolarWinds
• PRTG
• Log Management and Security Event Analysis

Cloud Security

• AWS Security
• Azure Security
• Secure Cloud Network Architecture

Identity & Access Management

• Active Directory
• LDAP
• SSO
• RBAC
• Cisco ISE

Vulnerability Management

• Vulnerability Scanning
• Risk Assessment
• CVSS Framework
• Vulnerability Remediation

Automation & Scripting

• Python
• Bash
• Infrastructure Automation
• Ansible or Terraform (Preferred)