Job Description

Role Objective:
Seeking a skilled Network Security Specialist with 5-8 years of experience in managing enterprise security infrastructure, including firewalls, VPNs, NAC, and ZTNA. The role involves designing and maintaining secure access controls and perimeter defenses across hybrid environments. Strong analytical skills, hands-on expertise, and a proactive approach to threat management are essential. The specialist will contribute to strategic security initiatives, enhance detection capabilities, and support continuous improvement of the organization's cybersecurity posture.
Responsibilities & Outcomes:

• Firewall Administration & Monitoring: Manage firewall configurations, rule modifications, backups, and daily health checks. Monitor logs for suspicious activity, ensure log forwarding and housekeeping per MSIL policies and OEM best practices, and maintain adequate disk space.
• Security Operations & Maintenance: Create site-to-site VPNs, troubleshoot firewall issues, apply patches/firmware upgrades, perform failover testing biannually, and recover device configurations during disasters. Ensure compliance with OEM standards and support integration with approved tools.
• Reporting & Governance: Conduct root cause analysis for critical incidents, close VA/PT observations, provide design recommendations, review policies biannually, assess change risks, and deliver reports aligned with SLAs and security requirements. Integrate firewalls with SIEM platforms for centralized logging, alerting, and incident response.
• Deploy and manage NAC solutions (Cisco ISE, Aruba ClearPass) to enforce device posture and role-based access across wired and wireless networks.
• Integrate NAC with identity providers and endpoint protection for dynamic access control.
• Configure and maintain secure remote access and site-to-site VPNs using IPSec and SSL technologies.
• Enforce MFA and certificate-based authentication for VPN users and monitor session health and performance.
• Implement ZTNA frameworks using tools like Zscaler, Prisma Access, or Cloudflare Zero Trust to enforce identity-aware access.
• Collaborate with IAM and endpoint teams to apply micro-segmentation and continuous authentication.
• Ensure network security controls align with ISO 27001, NIST, and Zero Trust standards.
• Automate routine security tasks using Python or PowerShell for firewall rule validation and NAC posture checks.
• Stay updated on emerging threats and technologies to enhance the organization's security posture.

Preferred Certifications: Palo Alto, Cisco, F5 Certified on Firewall Management

Skills Required