Network Security Engineer

Job OverviewWe are looking for an experienced Network Security Engineer to design, implement, monitor, and support enterprise security infrastructure across on-premises, cloud, and hybrid environments. The ideal candidate should possess strong expertise in next-generation firewalls, SIEM platforms, cloud security, Zero Trust architecture, and modern cybersecurity operations.The role requires hands-on experience with technologies such as Fortinet, SonicWall, Palo Alto Networks, SIEM solutions, SASE, SD-WAN, endpoint security, and threat detection platforms.Key ResponsibilitiesDesign, deploy, and manage enterprise network security solutionsConfigure and administer Fortinet, SonicWall, and Palo Alto firewallsImplement and maintain VPNs, IPS/IDS, web filtering, NAT, ACLs, and segmentation policiesMonitor security events using SIEM, XDR, and SOC monitoring platformsInvestigate security incidents, perform threat analysis, and support incident response activitiesManage firewall policies, security rules, and compliance controlsImplement Zero Trust Network Access (ZTNA) and identity-based security controlsSupport cloud security initiatives across AWS, Azure, and hybrid infrastructureConfigure and support SD-WAN and Secure Access Service Edge (SASE) solutionsConduct vulnerability assessments and remediation activitiesCollaborate with infrastructure, cloud, and application teams to secure enterprise environmentsMaintain security documentation, diagrams, SOPs, and audit recordsParticipate in on-call rotations and critical incident handlingRequired Skills & TechnologiesFirewall & Network SecurityFortinet FortiGateSonicWallPalo Alto NetworksCheck Point (preferred)Cisco Firepower / ASAVPN Technologies (IPSec / SSL VPN)IDS/IPSWeb Application Firewall (WAF)NAC (Network Access Control)Modern Security TechnologiesZero Trust Architecture (ZTA)ZTNA (Zero Trust Network Access)SASE (Secure Access Service Edge)SD-WAN SecuritySSE (Security Service Edge)CASB (Cloud Access Security Broker)Micro-segmentationSecure Remote Access SolutionsSIEM, SOC & Threat DetectionExperience with one or more:SplunkQRadarMicrosoft SentinelLogRhythmArcSightElastic SIEMKnowledge of:SOC operationsThreat huntingLog correlationMITRE ATT&CK frameworkIncident responseThreat intelligence integrationCloud & Infrastructure SecurityAWS SecurityMicrosoft Azure SecurityHybrid cloud networkingCloud firewall managementSecurity Groups / NSGsIdentity & Access Management (IAM)Endpoint & Advanced SecurityEDR/XDR platformsCrowdStrikeMicrosoft DefenderSentinelOneEndpoint hardeningDLP (Data Loss Prevention)Email security solutionsNetworking FundamentalsStrong understanding of:TCP/IPRouting & SwitchingVLANsBGP / OSPFDNS / DHCPLoad BalancingNetwork troubleshootingAutomation & Scripting (Preferred)PythonPowerShellBash scriptingSecurity automationSOAR platformsPreferred CertificationsFortinet NSE / FCPPalo Alto PCNSA / PCNSECCNP SecurityCISSPCEHCompTIA Security+Microsoft SC CertificationsAWS Security SpecialtyEducationBachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field preferred.Soft SkillsStrong analytical and troubleshooting skillsAbility to work in high-pressure environmentsExcellent communication and stakeholder managementStrong documentation and reporting abilitiesProactive mindset with focus on continuous improvementOriginally posted on Himalayas