Network Security Engineer SME

Firewall Administration & Architecture Deployment & Config: Install, configure, and maintain Palo Alto (PA-Series) and Fortinet (FortiGate) firewalls. Policy Management: Design and audit firewall rule bases, security profiles, and NAT policies. Centralised Management: Manage large-scale environments using Palo Alto Panorama and Fortinet FortiManager / FortiAnalyzer . VPN Management: Establish and secure Site-to-Site IPsec VPNs and Remote Access VPNs (GlobalProtect, FortiClient). 2. Network Security Operations Threat Mitigation: Configure advanced security features including IPS/IDS, URL filtering, Anti- Upgrade & Patching: Perform routine firmware upgrades, hotfixes, and vulnerability patching. Monitoring: Analyze security logs to detect anomalies, unauthorized access, or potential network breaches. High Availability: Maintain redundant firewall clusters (HA Active/Passive and Active/Active topologies). Traffic Management & Core Network Services (DDI) Application Delivery: Configure F5 BIG-IP LTM (Local Traffic Manager), including VIPs, Pools, Monitors, SSL offloading, and advanced iRules . IPAM & DDI: Manage Infoblox Grid Manager to run high-availability DNS, DHCP, and IP Address Management (IPAM) . Network Automation: Maintain network health by automating IP allocations and DNS entries. Edge Architecture & WAN Edge SD-WAN Fabric: Design, deploy, and optimize SD-WAN solutions (Fortinet Secure SD-WAN or Palo Alto Prisma SD-WAN) to replace traditional MPLS. Traffic Steering: Define application-aware routing paths to guarantee performance for critical SaaS and cloud workloads. Hybrid Connectivity: Maintain secure Site-to-Site IPsec VPN overlays across the SD-WAN fabric. Troubleshooting & Support Incident Response: Act as a Tier 2/3 escalation point for complex network security issues and outages. Packet Analysis: Use tools like Wireshark and built-in CLI packet captures to diagnose complex routing or traffic drops. Performance Tuning: Monitor firewall CPU, memory, and session counts to optimize throughput Troubleshooting & Architecture Tier 3 Escalation: Diagnose complex outages involving multi-vendor paths (e.g., F5 VIP to Firewall to SD-WAN edge). Packet Diagnostics: Master packet capture tools (Wireshark, tcpdump) to resolve deep-layer routing, translation, or load-balancing issues. Firewall Administration & Architecture Deployment & Config: Install, configure, and maintain Palo Alto (PA-Series) and Fortinet (FortiGate) firewalls. Policy Management: Design and audit firewall rule bases, security profiles, and NAT policies. Centralised Management: Manage large-scale environments using Palo Alto Panorama and Fortinet FortiManager / FortiAnalyzer . VPN Management: Establish and secure Site-to-Site IPsec VPNs and Remote Access VPNs (GlobalProtect, FortiClient). 2. Network Security Operations Threat Mitigation: Configure advanced security features including IPS/IDS, URL filtering, Anti- Upgrade & Patching: Perform routine firmware upgrades, hotfixes, and vulnerability patching. Monitoring: Analyze security logs to detect anomalies, unauthorized access, or potential network breaches. High Availability: Maintain redundant firewall clusters (HA Active/Passive and Active/Active topologies). Traffic Management & Core Network Services (DDI) Application Delivery: Configure F5 BIG-IP LTM (Local Traffic Manager), including VIPs, Pools, Monitors, SSL offloading, and advanced iRules . IPAM & DDI: Manage Infoblox Grid Manager to run high-availability DNS, DHCP, and IP Address Management (IPAM) . Network Automation: Maintain network health by automating IP allocations and DNS entries. Edge Architecture & WAN Edge SD-WAN Fabric: Design, deploy, and optimize SD-WAN solutions (Fortinet Secure SD-WAN or Palo Alto Prisma SD-WAN) to replace traditional MPLS. Traffic Steering: Define application-aware routing paths to guarantee performance for critical SaaS and cloud workloads. Hybrid Connectivity: Maintain secure Site-to-Site IPsec VPN overlays across the SD-WAN fabric. Troubleshooting & Support Incident Response: Act as a Tier 2/3 escalation point for complex network security issues and outages. Packet Analysis: Use tools like Wireshark and built-in CLI packet captures to diagnose complex routing or traffic drops. Performance Tuning: Monitor firewall CPU, memory, and session counts to optimize throughput Troubleshooting & Architecture Tier 3 Escalation: Diagnose complex outages involving multi-vendor paths (e.g., F5 VIP to Firewall to SD-WAN edge). Packet Diagnostics: Master packet capture tools (Wireshark, tcpdump) to resolve deep-layer routing, translation, or load-balancing issues.