Network Security Engineer I

We are seeking a highly skilled and motivated Firewall Administrator to join our Infrastructure and Network teams. This role is responsible for the design, implementation, administration, monitoring, and continuous improvement of enterprise firewall and network security platforms. The ideal candidate will have extensive experience managing complex network environments, implementing security best practices, and partnering with infrastructure, cloud, and application teams to protect critical business systems. This is a hybrid role and work hours are 2pm – 11pm IST and 6:30pm – 3:30pm IST.

Responsibilities:

• Configure, administer, and maintain enterprise firewall platforms including Palo Alto, Cisco Firepower, or equivalent technologies.

• Manage firewall policies, security zones, NAT rules, VPN configurations, and access control.

• Review, approve, and implement firewall change requests in accordance with established security standards and change management procedures.

• Develop, maintain, and support reusable Infrastructure-as-Code and configuration automation for firewall policies, network objects, security zones, NAT rules, VPN configurations, and related network security services.

• Monitor firewall performance, capacity, and security events to ensure optimal operation.

• Conduct regular rule reviews and policy optimization to improve security posture and operational efficiency.

• Implement and maintain network segmentation, micro-segmentation, and Zero Trust security principles.

• Automate firewall rule analysis, recertification, expiry tracking, duplicate and shadowed rule detection, and identification of unused objects to support secure policy lifecycle management.

• Investigate suspicious network activity and collaborate with InfoSec teams on threat detection and incident response activities.

• Analyze security alerts, logs, and network traffic to identify vulnerabilities, threats, and anomalies.

• Partner with network, server, cloud, and application teams to design secure solutions for business initiatives.

• Support hybrid and cloud-based security architectures across AWS, Microsoft Azure, and Google Cloud environments.

• Assist with security assessments, penetration testing activities, and remediation efforts.

• Participate in infrastructure projects involving mergers, acquisitions, migrations, and network modernization initiatives.

• Ensure compliance with security policies, industry standards, and regulatory requirements.

• Develop and maintain network security documentation, diagrams, operational procedures, and configuration standards.

• Support internal and external audits by providing evidence, reports, and technical expertise.

• Recommend improvements to security controls, processes, and technologies.

• Participate in on-call support rotations and provide timely resolution of critical incidents.

• Perform root cause analysis for security and connectivity issues.

• Lead troubleshooting efforts involving firewall, VPN, routing, and network security technologies.

Essential traits:

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Engineering, or a related discipline; equivalent work experience will be considered.

• 5+ years of experience administering enterprise firewall and network security environments.

• Hands-on experience with one or more leading firewall platforms including Palo Alto Networks, Fortinet, Cisco Firepower, or Check Point.

• Strong knowledge of TCP/IP, routing protocols, switching, DNS, DHCP, VPN technologies, NAT, and network architecture.

• Experience managing firewall policies in large-scale enterprise environments.

• Strong understanding of cybersecurity principles, network security controls, and threat mitigation strategies.

• Experience with security monitoring and logging tools.

• Excellent troubleshooting, analytical, and problem-solving skills.

• Strong written and verbal communication skills.

Preferred Qualifications and Competencies

• Professional certifications such as: 

  • Palo Alto PCNSA or PCNSE

  • CCNP Security

  • CISSP or Security+

• Experience with cloud-native security services and security automation.

• Familiarity with scripting or automation using PowerShell, Python, or REST APIs.

• Experience working in regulated industries or highly available enterprise environments.

• Strong attention to detail and commitment to operational excellence.

• Ability to manage multiple priorities in a fast-paced environment.

• Collaborative mindset with the ability to work effectively across technical and business teams.

• Proactive approach to identifying and mitigating security risks.

• Commitment to continuous learning and professional development.

About Kroll

In a world of disruption and increasingly complex business challenges, our professionals bring truth into focus with the Kroll Lens. Our sharp analytical skills, paired with the latest technology, allow us to give our clients clarity—not just answering all areas of business. We value the diverse backgrounds and perspectives that enable us to think globally. As part of One team, One Kroll, you will contribute to a supportive and collaborative work environment that empowers you to excel.

Kroll is the premier global valuation and corporate finance advisor with expertise in complex valuation, disputes and investigations, M&A, restructuring, and compliance and regulatory consulting. Our professionals balance analytical skills, deep market insight and independence to help our clients make sound decisions. As an organization, we think globally—and encourage our people to do the same.

Kroll is committed to equal opportunity and diversity, and recruits people based on merit.

In order to be considered for a position, you must formally apply via careers.kroll.com.
 

#LI-JC1

#LI-Hybrid