Network Security Engineer
Job Overview
We are looking for an experienced Network Security Engineer to design, implement, monitor, and support enterprise security infrastructure across on-premises, cloud, and hybrid environments. The ideal candidate should possess strong expertise in next-generation firewalls, SIEM platforms, cloud security, Zero Trust architecture, and modern cybersecurity operations.
The role requires hands-on experience with technologies such as Fortinet, SonicWall, Palo Alto Networks, SIEM solutions, SASE, SD-WAN, endpoint security, and threat detection platforms.
Key Responsibilities
- Design, deploy, and manage enterprise network security solutions
- Configure and administer Fortinet, SonicWall, and Palo Alto firewalls
- Implement and maintain VPNs, IPS/IDS, web filtering, NAT, ACLs, and segmentation policies
- Monitor security events using SIEM, XDR, and SOC monitoring platforms
- Investigate security incidents, perform threat analysis, and support incident response activities
- Manage firewall policies, security rules, and compliance controls
- Implement Zero Trust Network Access (ZTNA) and identity-based security controls
- Support cloud security initiatives across AWS, Azure, and hybrid infrastructure
- Configure and support SD-WAN and Secure Access Service Edge (SASE) solutions
- Conduct vulnerability assessments and remediation activities
- Collaborate with infrastructure, cloud, and application teams to secure enterprise environments
- Maintain security documentation, diagrams, SOPs, and audit records
- Participate in on-call rotations and critical incident handling
Required Skills & Technologies
Firewall & Network Security
- Fortinet FortiGate
- SonicWall
- Palo Alto Networks
- Check Point (preferred)
- Cisco Firepower / ASA
- VPN Technologies (IPSec / SSL VPN)
- IDS/IPS
- Web Application Firewall (WAF)
- NAC (Network Access Control)
Modern Security Technologies
- Zero Trust Architecture (ZTA)
- ZTNA (Zero Trust Network Access)
- SASE (Secure Access Service Edge)
- SD-WAN Security
- SSE (Security Service Edge)
- CASB (Cloud Access Security Broker)
- Micro-segmentation
- Secure Remote Access Solutions
SIEM, SOC & Threat Detection
Experience with one or more:
- Splunk
- QRadar
- Microsoft Sentinel
- LogRhythm
- ArcSight
- Elastic SIEM
Knowledge of:
- SOC operations
- Threat hunting
- Log correlation
- MITRE ATT&CK framework
- Incident response
- Threat intelligence integration
Cloud & Infrastructure Security
- AWS Security
- Microsoft Azure Security
- Hybrid cloud networking
- Cloud firewall management
- Security Groups / NSGs
- Identity & Access Management (IAM)
Endpoint & Advanced Security
- EDR/XDR platforms
- CrowdStrike
- Microsoft Defender
- SentinelOne
- Endpoint hardening
- DLP (Data Loss Prevention)
- Email security solutions
Networking Fundamentals
Strong understanding of:
- TCP/IP
- Routing & Switching
- VLANs
- BGP / OSPF
- DNS / DHCP
- Load Balancing
- Network troubleshooting
Automation & Scripting (Preferred)
- Python
- PowerShell
- Bash scripting
- Security automation
- SOAR platforms
Preferred Certifications
- Fortinet NSE / FCP
- Palo Alto PCNSA / PCNSE
- CCNP Security
- CISSP
- CEH
- CompTIA Security+
- Microsoft SC Certifications
- AWS Security Specialty
Education
Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field preferred.
Soft Skills
- Strong analytical and troubleshooting skills
- Ability to work in high-pressure environments
- Excellent communication and stakeholder management
- Strong documentation and reporting abilities
- Proactive mindset with focus on continuous improvement
Originally posted on Himalayas