Network Security Engineer / Firewall SME

Role Overview We are looking for a highly experienced Network Security Engineer to lead firewall design, implementation, and security operations. The role requires strong expertise in next-generation firewalls (NGFW), network security technologies, and secure connectivity, with the ability to design, implement, and troubleshoot complex enterprise environments. Role & responsibilities Design, implement, and manage network security solutions across enterprise environments. Act as an SME for firewall technologies, network security, and VPN architectures. Configure, maintain, and troubleshoot next-generation firewalls (NGFWs) and security devices. Perform device hardening, vulnerability assessments, and intrusion detection/prevention. Manage and maintain IPSec VPNs, including migration from legacy environments to NGFW platforms. Establish secure connectivity with customers, partners, and vendors. Plan, implement, and execute network/security changes, including: Hardware upgrades Firewall migrations Service enhancements Configure and maintain security policies, including: NAT (Network Address Translation) ACLs (Access Control Lists) Firewall rules and profiles Work with security tools and platforms, including IDS/IPS and SIEM systems. Monitor and troubleshoot network connectivity issues using packet capture and analysis tools. Produce and maintain accurate documentation for implementation, operations, and compliance. Perform risk assessments and security analysis aligned with business requirements. Implement preventive and reactive security controls and mitigation strategies. Strong experience in firewall design and network security architecture . Hands-on expertise in leading firewall platforms , including: Cisco FTD / ASA Fortinet FortiGate Palo Alto Checkpoint Strong understanding of: TCP/IP communication and packet flow Packet capture & troubleshooting techniques Experience with security technologies , including: IDS/IPS SIEM IPSec Malware prevention Web security and URL filtering Strong knowledge of networking fundamentals , including: Routing protocols (OSPF, BGP) Switching technologies (STP, VTP, MAC learning, ARP, RARP) Port-channel, LACP Hands-on experience with: NAT and ACL configuration Security policy creation and optimization Experience managing firewall tools, such as: FortiManager Palo Alto Panorama FireMon Good understanding of authentication protocols : RADIUS TACACS+ Proven experience in VPN migration projects and network transformations. Strong troubleshooting and analytical skills in complex environments . Preferred Qualifications CCIE Security or equivalent advanced certification Other relevant certifications: PCNSE (Palo Alto) NSE (Fortinet) CCNP Security Nice to Have Experience with cloud security (AWS/Azure firewall solutions) Exposure to automation and scripting (Python, Ansible) Familiarity with Zero Trust architecture Experience in SOC or security operations environments