Network Security Engineer-Banking

Own firewall and WAF rule life-cycle design change review implementation optimization and periodic recertification Manage SSL TLS certificates ciphers and HSTS for internet-facing services enforce secure crypto standards Build and maintain site-to-site VPNs SD-WAN and secure remote access solutions across hybrid networks Integrate network security controls with SIEM SOAR and network telemetry develop actionable runbooks Implement Azure AWS network security VNet VPC design NSGs NACLs Private Link Transit Gateway Virtual WAN Firewall IDS IPS Deploy and govern cloud WAF and application gateways integrate with native services where applicable Embed guardrails IaC policy tagging security blueprints and support Dev Sec Ops  workflows.

• F5 BIG-IP (ASM/Advanced WAF): policy tuning, attack signatures, bot and DDoS mitigation, iRules basics.
• Palo Alto Networks: security policy design, App-/URL filtering, Threat Prevention/Wild Fire, Panorama.
• Fortinet Forti Gate/Forti Manager/Forti Analyzer: NGFW policies, IPS/AV/web filter, automation, logging.
• Citrix ADC (Net Scaler): L7 load balancing, SSL/TLS, content switching, AppFW exposure.

• VNet/VPC, peering, routing, NSG/NACL, Azure Firewall/AWS Network Firewall, Application Gateway/ALB/WAF, Private Link, Transit Gateway/Virtual WAN.

• TCP/IP, BGP/OSPF, NAT, DNS, TLS, HTTP/S, IPsec/SSL VPN.

Proven experience designing for high availability, performance, and security compliance.

Security first mindset with pragmatic delivery. Ownership, attention to detail, and strong troubleshooting under pressure. Collaboration across infra, app, SOC, and risk teams; mentoring capability.

• F5: 301a/b (BIG-IP LTM), 302 (ASM/Advanced WAF) or equivalent practical mastery.
• Palo Alto: PCNSE.
• Fortinet: NSE 4–7 (NSE 7 highly desirable).
• Citrix: CCA-N/CCP-N (ADC).
• Cloud:
  Azure Security Engineer (AZ-500), AWS Security – Specialty (or Architect certs with strong security exposure).