What success looks like in this role:
Experience
8–12 Years
Job Summary
We are seeking an experienced L3 Network Security Engineer with strong expertise in Palo Alto , Fortinet Firewalls , Fortinet SD-WAN , Panorama , Cloud Network Security , and Data Center Migration . The ideal candidate will be responsible for designing, implementing, troubleshooting, and optimizing enterprise network security solutions while supporting business-critical infrastructure and transformation projects.
Key Responsibilities
Firewall Administration
Design, implement, and manage Palo Alto and Fortinet firewall infrastructure.
Configure and troubleshoot Security Policies, NAT, VPN, SSL Decryption, URL Filtering, IPS, Anti-Malware, and Application Control.
Perform firewall rule reviews and policy optimization.
Conduct firewall software upgrades and security patching.
Fortinet SD-WAN
Design, deploy, and support Fortinet SD-WAN solutions.
Configure SLA policies, Performance SLAs, Overlay VPN, ADVPN, and Dynamic Routing.
Troubleshoot SD-WAN routing and application performance issues.
Support Hub-and-Spoke and Multi-Hub SD-WAN architectures.
Palo Alto Panorama
Administer Panorama for centralized policy management.
Manage device groups, templates, template stacks, and software updates.
Implement centralized logging and compliance reporting.
Perform configuration backups and disaster recovery activities.
Cloud Network Security
Deploy and support Azure Network Virtual Appliances (NVA).
Configure Azure Virtual WAN (vWAN), Virtual Networks (VNet), Route Tables, NSGs, UDRs, and VPN Gateways.
Implement cloud firewall solutions and hybrid connectivity.
Troubleshoot cloud networking and security issues.
Data Center Migration
Plan and execute data center migration activities.
Perform firewall migration and rule migration.
Coordinate application cutovers and migration testing.
Validate connectivity during migration windows.
Prepare rollback plans and post-implementation validation.
Routing & Switching
Configure and troubleshoot: BGP
OSPF
Static Routing
VRF
ECMP
Policy-Based Routing
Analyze routing convergence and failover scenarios.
Security Operations
Investigate and resolve P1/P2 network security incidents.
Perform Root Cause Analysis (RCA).
Coordinate with vendors (Palo Alto, Fortinet, Microsoft TAC).
Implement security hardening and best practices.
Review security advisories and recommend remediation plans.
Change & Project Management
Prepare implementation plans, rollback plans, and test plans.
Participate in CAB meetings.
Execute changes during maintenance windows.
Lead infrastructure upgrade and migration projects.
Documentation
Develop and maintain: HLD/LLD
SOPs
Runbooks
Knowledge Articles
Network diagrams
As-built documentation
Required Technical Skills
Firewalls
Palo Alto Networks (PAN-OS)
FortiGate Firewalls
FortiManager
FortiAnalyzer
Panorama
Fortinet Technologies
Fortinet SD-WAN
ADVPN
IPsec VPN
SSL VPN
High Availability (HA)
Virtual Domains (VDOM)
Cloud
Microsoft Azure
Azure Virtual WAN
Azure NVA
Azure Firewall
ExpressRoute
VPN Gateway
Azure Load Balancer
Routing
BGP
OSPF
Static Routing
ECMP
Route Redistribution
Security Technologies
IPS
IDS
SSL Inspection
URL Filtering
Application Control
Threat Prevention
DNS Security
Networking
TCP/IP
VLAN
NAT
QoS
DNS
DHCP
Proxy
Load Balancing
Monitoring & Management
Panorama
FortiManager
FortiAnalyzer
Azure Monitor
Syslog
SIEM Integration
Preferred Skills
Zscaler Internet Access (ZIA)
Zscaler Private Access (ZPA)
Cisco Networking
F5 Load Balancers
Azure Cloud Networking
Infrastructure as Code (Terraform/Ansible)
Python or PowerShell scripting
ITIL Change Management
Certifications (Preferred)
Palo Alto Networks Certified Network Security Engineer (PCNSE)
Fortinet NSE 4 / FCP Network Security
Fortinet NSE 7 / FCSS Network Security
Microsoft Azure Administrator (AZ-104)
Azure Network Engineer (AZ-700)
CCNP Security
ITIL Foundation
Soft Skills
Strong troubleshooting and analytical skills.
Excellent verbal and written…