Firewall Engineer

Design, deploy, administer, and support the organization’s enterprise firewall and perimeter security infrastructure. The role ensures secure, segmented, and policy-compliant traffic flow across data center, campus, remote-access, and hybrid environments while supporting security operations, change management, incident response, and continuous improvement of firewall controls.

• Manage firewall rule bases, security policies, NAT configurations, application control, and URL filtering in line with approved security standards and change management processes.
• Configure, maintain, and troubleshoot site-to-site and remote-access VPN solutions to ensure secure connectivity for users, partners, and business systems.
• Monitor firewall performance, traffic flows, and security events to identify anomalies, policy violations, and potential threats.
• Perform traffic analysis, root-cause investigation, and troubleshooting for firewall, VPN, and perimeter security incidents.
• Support incident response activities by providing firewall logs, analysis, containment actions, and remediation recommendations.
• Harden firewall configurations and remediate vulnerabilities identified through security scans, audits, assessments, and internal reviews.
• Maintain firmware, patches, signatures, and configuration backups to ensure platform stability, security, and compliance.
• Review firewall rule requests for accuracy, necessity, risk, and compliance before implementation.
• Maintain up-to-date technical documentation, network/security diagrams, standard operating procedures, and change records.
• Participate in planned maintenance windows, on-call support, disaster recovery activities, and security infrastructure projects as required.
• Collaborate with network, infrastructure, cloud, application, and security teams to support secure architecture and connectivity requirements.

• Strong hands-on firewall policy configuration, troubleshooting, and administration skills.
• Good understanding of site-to-site VPN, remote-access VPN, IPsec, SSL VPN, and secure connectivity concepts.
• Ability to analyze logs, traffic flows, packet captures, and security events to support troubleshooting and investigations.
• Knowledge of firewall hardening, vulnerability remediation, patching, and configuration compliance.
• Professional certification such as PCNSE, NSE, CCNP Security, CCSA/CCSE or equivalent.
• Experience with scripting or automation tools such as Python, Ansible, or firewall management APIs
  .
• Familiarity with SIEM platforms and log analysis tools.
• Exposure to cloud firewall, security groups, network security controls, or hybrid cloud connectivity.
• Experience with high-availability firewall environments and disaster recovery testing.