Senior Network Security Engineer

We are seeking a highly skilled and experienced Senior Network Security Engineer to design, implement, and manage our enterprise network and security infrastructure. The ideal candidate will have hands-on expertise with a range of network and security platforms including FortiGate, Palo Alto, Cisco (Nexus/IOS XE), VMware NSX, F5 Load Balancers (LTM/ASM), IDS/IPS, and threat detection systems like Gigamon, ExtraHop NDR, and Proofpoint. You will play a critical role in maintaining a secure, scalable, and highly available network environment.

Key Responsibilities:

• Design, deploy, configure, and maintain network security appliances including FortiGate and Palo Alto firewalls.
• Manage and support Cisco Nexus and IOS XE network infrastructure across data centers and branch offices.
• Implement and administer VMware NSX network virtualization and security features.
• Configure and maintain F5 Load Balancers (LTM, ASM) to ensure optimized and secure application delivery.
• Deploy and tune Intrusion Prevention Systems (IPS) and Intrusion Detection Systems (IDS) to protect against internal and external threats.
• Utilize Gigamon and ExtraHop NDR for network traffic visibility and anomaly detection.
• Administer Proofpoint for email threat protection and data loss prevention.
• Troubleshoot complex network and security incidents, perform root cause analysis, and implement corrective actions.
• Collaborate with cross-functional teams including IT, DevOps, and Compliance to ensure secure system design.
• Maintain documentation related to configurations, procedures, and change management.
• Stay current on industry best practices, emerging threats, and evolving technologies.

Required Skills & Qualifications:

• 5+ years of hands-on experience in network and security engineering roles.
• Strong expertise in FortiGate and Palo Alto firewalls (rule base design, VPN, content filtering).
• Deep understanding of Cisco networking technologies, especially Nexus and IOS XE platforms.
• Solid experience with VMware NSX for microsegmentation and virtual networking.
• Hands-on experience with F5 BIG-IP, especially LTM and ASM modules.
• Proficiency in configuring and tuning IPS/IDS platforms.
• Experience with Gigamon for network packet brokering and visibility.
• Knowledge of ExtraHop for behavioral analysis and network detection and response.
• Familiarity with Proofpoint solutions for email security and threat protection.
• Strong troubleshooting skills and experience with packet analysis tools (Wireshark, tcpdump).
• Excellent communication and documentation skills.

Preferred Certifications (Optional):

• Fortinet NSE 4/5/6
• Palo Alto PCNSE
• Cisco CCNP/CCIE (Security/Data Center)
• VMware VCP-NV
• F5 Certified Technology Specialist (CTS)
• Certified Information Systems Security Professional (CISSP)