Skills:
Fortinet, SD-WAN, IPS, Intrusion detection system, fortigate, Firewall Management, Checkpoint, SIEM,
Job Title: Senior Network Security Engineer
Experience: 8+
Job Purpose:We are looking for an experienced and proactive Senior Network Security Engineer with a strong foundation in network security architecture, SD-WAN, and datacenter operations. The role requires hands-on expertise with Fortinet SD-WAN, Check Point and Cisco firewalls, and a solid understanding of IPS/IDS, DNS security, ZTNA, and SASE principles. The ideal candidate will be adaptable to a dynamic work environment, capable of handling enterprise-scale operations, and flexible to support business-critical activities beyond standard hours.
Responsibilities
- SD-WAN & Network Security Operations
- Lead the design, deployment, and lifecycle management of Fortinet SD-WAN across enterprise locations.
- Ensure optimized routing, traffic segmentation, and secure interconnectivity for multi-site WAN environments.
- Integrate SD-WAN with broader SASE framework to ensure secure remote access and policy enforcement.
- Firewall & Perimeter Security Management
- Administer, configure, and maintain Check Point and Cisco firewalls for high-availability enterprise networks.
- Review and optimize firewall rule bases, NAT configurations, and VPN policies for compliance and efficiency.
- Implement and fine-tune Intrusion Prevention and Detection Systems (IPS/IDS) for proactive threat mitigation.
- Datacenter & Core Network Security
- Support and enhance datacenter network architecture, including segmentation, routing, and redundancy planning.
- Manage and secure DNS, DHCP, and IPAM services, ensuring integrity and protection against DNS-based threats.
- Coordinate planned changes, capacity expansions, and datacenter interconnect projects.
- Advanced Security Technologies
- Implement and support Zero Trust Network Access (ZTNA) and SASE-based architectures for remote and hybrid work environments.
- Collaborate with security and infrastructure teams to align network access controls with organizational security posture.
- Participate in integration of next-generation solutions (ZTNA, SWG, CASB, DLP) under unified SASE frameworks.
- Operational Excellence & Compliance
- Provide L3-level operational support for complex incidents and change management activities.
- Ensure detailed documentation, including network diagrams, SOPs, and change logs.
- Support internal/external audits, ensuring alignment with ISO 27001, NIST, or corporate compliance frameworks.
Coordinate with vendors and service providers for timely resolution of escalated network or security issues.
Mandatory
- Proven hands-on experience with:
- Fortinet SD-WAN & Firewalls (NSE 4-7 preferred)
- Check Point & Cisco ASA/Firepower firewalls
- IPS/IDS solutions (Fortinet, Cisco, or equivalent)
- DNS Security and protection mechanisms (DNS filtering, RPZ, DoH/DoT)
- ZTNA & SASE concepts and practical deployments
- Deep understanding of LAN/WAN, routing protocols (BGP, OSPF), VPNs, VLANs, and datacenter security design.
- Experience integrating security tools such as SIEM, NAC, and endpoint protection platforms.
- Excellent troubleshooting and incident response capabilities under pressure.
- Certifications such as Fortinet NSE 4-7, CCNP Security, Check Point CCSA/CCSE, Zscaler ZCP, or SASE/Cloud Security certifications are highly desirable.
