JOB DESCRIPTION:
ROLES&RESPONSIBILITIES:
- Ability to administer firewalls, routers, virtual private networks (VPNs), and other security tools
- Strong understanding of public cloud like AWS, Azure or Google Cloud Platform.
- Strong knowledge on Site-Site VPN, Remote Access VPN, DMVPN, GETVPN, SSL-VPN, FLEX VPN.
- Maintaining & implementation of the SOP for Network security
- Experience and hands on with Cisco ACS/ISE
- Implemented Site to Site VPN Using IPSEC
- Responsible for routers and switches hardening and enabling security features
- Implement changes on BIG IP LTM (F5) Virtual server | pool members |Monitor.
- Responsible for coordinating with remote hand support engineer for the O&M activities
- Having experience on Firewall migration project.
- Experience in configuring, installing & maintaining Palo Alto & Cisco ASA Firewalls.
- Delivered firewall deployment Security project.
- Day to day operational changes & Incidents.
- Having experience on Firewall migration project.
- Experienced in configuring VPN and applying security policy on various platform
- Configuring firewall policies, NAT rules.
- Ability to provide solution and resolve network issues to optimize network security & efficiency besides maintaining high quality standards
- Eager to contribute in a team-oriented environment and work for business growth
- Having experience on Firewall migration project.
- Web Security like URL filtering, bandwidth management, malware protection, AD integration, Proxy authentication etc.
- Make sure that security policies are updated on time and are always up to date.
- Ensure periodic testing of the organization's network and systems from a security point of view.
- Be aware of the latest threats in the cybersecurity domain to guide and advise the organization regarding the up gradation of systems.
- Ensure that systems are back up and running in case of a security attack.
- Make sure that web and email security protocols are maintained.
- Good knowledge on F5 Load balancers like LTM and GTM
- Excellent written and verbal communications skills are essential
- Good Knowledge on AAA, RADIUS, TACACS+, ISE.
- Strong knowledge on routing protocols OSPF, EIGRP and BGP
- Experience in handling Incident, Service request and Changes using Service Now tool
SKILLS REQUIRED:
- Minimum of 8 years of relevant hands-on experience in configuring and Palo Alto, Check point, Cisco ASA Firewalls
- Cisco CCNA (Security) certification or higher certification a plus
- Exposure, experience in working in a Cloud environment, knowing AWS
- Scripting knowledge on Python and PowerShell
- Preferred Tool Knowledge:
- ACS/ISE
- Netflow Analyzer
- Wireshark
- Net Scout
- nGeniusOne
- InfiniStreamNG
- Solarwinds
- Major RESPONSIBILITIES:
- Add network devices in ACS/ISE and troubleshoot
- Creating policies, rules in Palo Alto and Check point firewalls
- Attending weekly cab meeting for getting approval from change board.
- Planning and implementing of customer changes, based around an ITIL framework.
- Implementation & migration security devices.