Lead Network Security Engineer

Job Summary

We are seeking a highly skilled L3 Network Security Engineer with extensive experience in Palo Alto and Fortinet security technologies, Fortinet SD-WAN, Panorama, Azure Cloud Network Security, and Data Center Migration initiatives. The role is responsible for designing, implementing, managing, and optimizing enterprise network security solutions while ensuring the availability, performance, and security of critical business infrastructure. The ideal candidate will play a key role in complex transformation projects, security operations, cloud networking, and large-scale migration activities.

Roles & Responsibilities

Network Security & Firewall Management

• Design, deploy, administer, and optimize Palo Alto and Fortinet firewall environments.
• Configure and manage security policies, NAT, VPNs, SSL Decryption, URL Filtering, IPS, Anti-Malware, and Application Control.
• Perform firewall rule reviews, policy optimization, software upgrades, and security patch management.
• Ensure firewall high availability, resilience, and compliance with security standards.

Fortinet SD-WAN Administration

• Design, implement, and maintain Fortinet SD-WAN solutions across enterprise environments.
• Configure Overlay VPN, ADVPN, SLA-based routing, Performance SLAs, and dynamic routing protocols.
• Troubleshoot complex SD-WAN connectivity, routing, and application performance issues.
• Support Hub-and-Spoke and Multi-Hub SD-WAN architectures.

Palo Alto Panorama Management

• Administer Panorama for centralized firewall policy management and governance.
• Manage device groups, templates, template stacks, and software lifecycle activities.
• Implement centralized logging, monitoring, reporting, and compliance controls.
• Maintain backup, recovery, and disaster recovery processes.

Cloud Network Security

• Design and support Microsoft Azure network security solutions.
• Configure and manage Azure Virtual WAN, VNets, NSGs, UDRs, VPN Gateways, NVAs, and Azure Firewall.
• Support hybrid cloud connectivity and cloud security architecture implementations.
• Troubleshoot cloud networking and security-related issues.

Data Center Migration & Transformation

• Lead network and security activities during data center migration projects.
• Execute firewall and policy migrations while minimizing operational risks.
• Coordinate application cutovers, validation testing, rollback planning, and post-migration support.
• Ensure seamless connectivity and service continuity throughout migration activities.

Routing & Network Infrastructure

• Configure and troubleshoot routing protocols including BGP, OSPF, Static Routing, VRF, ECMP, and Policy-Based Routing.
• Analyze routing behavior, failover mechanisms, and network convergence scenarios.
• Support enterprise routing and switching environments.

Security Operations & Incident Management

• Provide L3 support for critical network security incidents and outages.
• Perform Root Cause Analysis (RCA) and implement preventive measures.
• Collaborate with vendors including Palo Alto, Fortinet, and Microsoft for issue resolution.
• Drive security hardening initiatives and implement industry best practices.

Change & Project Management

• Develop implementation, test, validation, and rollback plans for network security changes.
• Participate in CAB meetings and lead infrastructure upgrades, migration, and transformation projects.
• Execute planned changes during maintenance windows with minimal business impact.

Documentation & Knowledge Management

• Develop and maintain technical documentation, including:
  • High-Level and Low-Level Designs (HLD/LLD)
  • Standard Operating Procedures (SOPs)
  • Runbooks
  • Knowledge Base Articles
  • Network Diagrams
  • As-Built Documentation
• Provide technical mentoring and guidance to L1/L2 engineers.

Required Technical Skills

• Firewall Technologies: Palo Alto, Panorama, FortiGate, FortiManager, FortiAnalyzer
• Fortinet Security: SD-WAN, ADVPN, IPsec VPN, SSL VPN, HA, VDOM
• Cloud Security: Microsoft Azure, Azure Firewall, Azure Virtual WAN, NVA, ExpressRoute, VPN Gateway
• Routing & Networking: BGP, OSPF, Static Routing, ECMP, Route Redistribution, TCP/IP, VLAN, NAT, QoS, DNS, DHCP
• Security Technologies: IPS, IDS, SSL Inspection, URL Filtering, Threat Prevention, DNS Security
• Monitoring & Management: Panorama, FortiManager, FortiAnalyzer, Azure Monitor, Syslog, SIEM Integration

Preferred Skills

• Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA)
• Cisco Networking
• F5 Load Balancers
• Infrastructure as Code (Terraform, Ansible)
• Python or PowerShell Scripting
• ITIL Change Management

Preferred Certifications

• PCNSE – Palo Alto Networks Certified Network Security Engineer
• Fortinet FCP / FCSS Network Security
• Microsoft Azure Administrator (AZ-104)
• Azure Network Engineer Associate (AZ-700)
• CCNP Security
• ITIL Foundation

Key Deliverables

• Manage and enhance Palo Alto and Fortinet security environments.
• Administer Panorama, FortiManager, and FortiAnalyzer platforms.
• Design and support enterprise SD-WAN and cloud security solutions.
• Lead security infrastructure upgrades, migrations, and transformation initiatives.
• Provide advanced troubleshooting and incident response support.
• Drive compliance, governance, and continuous improvement across network security operations.