Network Security Engineer

Job Overview We are looking for an experienced Network Security Engineer to design, implement, monitor, and support enterprise security infrastructure across on-premises, cloud, and hybrid environments. The ideal candidate should possess strong expertise in next-generation firewalls, SIEM platforms, cloud security, Zero Trust architecture, and modern cybersecurity operations. The role requires hands-on experience with technologies such as Fortinet, SonicWall, Palo Alto Networks, SIEM solutions, SASE, SD-WAN, endpoint security, and threat detection platforms. Key Responsibilities - Design, deploy, and manage enterprise network security solutions - Configure and administer Fortinet, SonicWall, and Palo Alto firewalls - Implement and maintain VPNs, IPS/IDS, web filtering, NAT, ACLs, and segmentation policies - Monitor security events using SIEM, XDR, and SOC monitoring platforms - Investigate security incidents, perform threat analysis, and support incident response activities - Manage firewall policies, security rules, and compliance controls - Implement Zero Trust Network Access (ZTNA) and identity-based security controls - Support cloud security initiatives across AWS, Azure, and hybrid infrastructure - Configure and support SD-WAN and Secure Access Service Edge (SASE) solutions - Conduct vulnerability assessments and remediation activities - Collaborate with infrastructure, cloud, and application teams to secure enterprise environments - Maintain security documentation, diagrams, SOPs, and audit records - Participate in on-call rotations and critical incident handling Required Skills & Technologies Firewall & Network Security - Fortinet FortiGate - SonicWall - Palo Alto Networks - Check Point (preferred) - Cisco Firepower / ASA - VPN Technologies (IPSec / SSL VPN) - IDS/IPS - Web Application Firewall (WAF) - NAC (Network Access Control) Modern Security Technologies - Zero Trust Architecture (ZTA) - ZTNA (Zero Trust Network Access) - SASE (Secure Access Service Edge) - SD-WAN Security - SSE (Security Service Edge) - CASB (Cloud Access Security Broker) - Micro-segmentation - Secure Remote Access Solutions SIEM, SOC & Threat Detection Experience with one or more: - Splunk - QRadar - Microsoft Sentinel - LogRhythm - ArcSight - Elastic SIEM Knowledge of: - SOC operations - Threat hunting - Log correlation - MITRE ATT&CK framework - Incident response - Threat intelligence integration Cloud & Infrastructure Security - AWS Security - Microsoft Azure Security - Hybrid cloud networking - Cloud firewall management - Security Groups / NSGs - Identity & Access Management (IAM) Endpoint & Advanced Security - EDR/XDR platforms - CrowdStrike - Microsoft Defender - SentinelOne - Endpoint hardening - DLP (Data Loss Prevention) - Email security solutions Networking Fundamentals Strong understanding of: - TCP/IP - Routing & Switching - VLANs - BGP / OSPF - DNS / DHCP - Load Balancing - Network troubleshooting Automation & Scripting (Preferred) - Python - PowerShell - Bash scripting - Security automation - SOAR platforms Preferred Certifications - Fortinet NSE / FCP - Palo Alto PCNSA / PCNSE - CCNP Security - CISSP - CEH - CompTIA Security+ - Microsoft SC Certifications - AWS Security Specialty Education Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field preferred. Soft Skills - Strong analytical and troubleshooting skills - Ability to work in high-pressure environments - Excellent communication and stakeholder management - Strong documentation and reporting abilities - Proactive mindset with focus on continuous improvement Originally posted on Himalayas