About the role
Job Overview
We are looking for an experienced Network Security Engineer to design, implement, monitor, and support enterprise security infrastructure across on-premises, cloud, and hybrid environments. The ideal candidate should possess strong expertise in next-generation firewalls, SIEM platforms, cloud security, Zero Trust architecture, and modern cybersecurity operations.
The role requires hands-on experience with technologies such as Fortinet, SonicWall, Palo Alto Networks, SIEM solutions, SASE, SD-WAN, endpoint security, and threat detection platforms.
Key Responsibilities
Design, deploy, and manage enterprise network security solutions
Configure and administer Fortinet, SonicWall, and Palo Alto firewalls
Implement and maintain VPNs, IPS/IDS, web filtering, NAT, ACLs, and segmentation policies
Monitor security events using SIEM, XDR, and SOC monitoring platforms
Investigate security incidents, perform threat analysis, and support incident response activities
Manage firewall policies, security rules, and compliance controls
Implement Zero Trust Network Access (ZTNA) and identity-based security controls
Support cloud security initiatives across AWS, Azure, and hybrid infrastructure
Configure and support SD-WAN and Secure Access Service Edge (SASE) solutions
Conduct vulnerability assessments and remediation activities
Collaborate with infrastructure, cloud, and application teams to secure enterprise environments
Maintain security documentation, diagrams, SOPs, and audit records
Participate in on-call rotations and critical incident handling
Required Skills & Technologies
Firewall & Network Security
Fortinet FortiGate
SonicWall
Palo Alto Networks
Check Point (preferred)
Cisco Firepower / ASA
VPN Technologies (IPSec / SSL VPN)
IDS/IPS
Web Application Firewall (WAF)
NAC (Network Access Control)
Modern Security Technologies
Zero Trust Architecture (ZTA)
ZTNA (Zero Trust Network Access)
SASE (Secure Access Service Edge)
SD-WAN Security
SSE (Security Service Edge)
CASB (Cloud Access Security Broker)
Micro-segmentation
Secure Remote Access Solutions
SIEM, SOC & Threat Detection
Experience with one or more:
Splunk
QRadar
Microsoft Sentinel
LogRhythm
ArcSight
Elastic SIEM
Knowledge of:
SOC operations
Threat hunting
Log correlation
MITRE ATT&CK framework
Incident response
Threat intelligence integration
Cloud & Infrastructure Security
AWS Security
Microsoft Azure Security
Hybrid cloud networking
Cloud firewall management
Security Groups / NSGs
Identity & Access Management (IAM)
Endpoint & Advanced Security
EDR/XDR platforms
CrowdStrike
Microsoft Defender
SentinelOne
Endpoint hardening
DLP (Data Loss Prevention)
Email security solutions
Networking Fundamentals
Strong understanding of:
TCP/IP
Routing & Switching
VLANs
BGP / OSPF
DNS / DHCP
Load Balancing
Network troubleshooting
Automation & Scripting (Preferred)
Python
PowerShell
Bash scripting
Security automation
SOAR platforms
Preferred Certifications
Fortinet NSE / FCP
Palo Alto PCNSA / PCNSE
CCNP Security
CISSP
CEH
CompTIA Security+
Microsoft SC Certifications
AWS Security Specialty
Education
Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field preferred.
Soft Skills
Strong analytical and troubleshooting skills
Ability to work in high-pressure environments
Excellent communication and stakeholder management
Strong documentation and reporting abilities
Proactive mindset with focus on continuous improvement
Originally posted on Himalayas