Job Summary :
We are looking for a skilled and strategic Lead Network & Security Engineer to architect, manage, and secure enterprise-wide network systems. This senior role demands deep technical expertise across firewalls, VPN, IPS, Zscaler cloud security, switching technologies, SD-WAN, and wireless solutions. You'll lead design initiatives, mentor engineers, and ensure robust security postures across complex hybrid environments.
Key Responsibilities :
- Design and manage firewall deployments using Cisco ASA, Fortinet FortiGate, and Checkpoint, including advanced rulebase optimization and threat mitigation
- Architect, configure, and monitor VPN solutions (IPsec, SSL VPN) for secure connectivity across global networks
- Oversee implementation and tuning of Intrusion Prevention Systems (IPS) to defend against evolving threats
- Administer and optimize Zscaler Internet Access (ZIA) and Private Access (ZPA) policies for cloud security and access control
- Lead Layer 2 / 3 switching operations, including VLAN configuration, Spanning Tree Protocol (STP) tuning, and traffic segmentation
- Deploy and maintain Fortinet SD-WAN solutions for resilient connectivity and bandwidth optimization
- Manage enterprise wireless infrastructure across Cisco Wireless LAN Controller (WLC), Aruba, and Meraki platforms for performance and security
- Ensure reliable and secure operation of network services like DNS, DHCP, NTP, including redundancy and fault-tolerance
- Conduct network risk assessments, penetration testing coordination, and remediation planning
- Collaborate with cross-functional teams on security posture improvements, incident response strategy, and zero-trust architecture
- Document network diagrams, policies, procedures, and change requests with a focus on audit readiness
Key Skills :
Advanced experience in firewall rule audits , traffic shaping, and security policy enforcementStrong knowledge of Zscaler cloud security architecture and integration; Scripting or automation (Python, Bash, PowerShell) is a plusProficiency in VLAN routing, trunking, STP troubleshooting, and link redundancySolid command of SD-WAN architectures , overlay networks, and branch-office deploymentsFamiliarity with wireless authentication protocols, RF optimization, and controller-based managementCompetent in core services like DNS zone management , DHCP scopes , and NTP synchronizationShow more
Show less
Skills Required
wireless solutions, Ipsec, Cloud Security, Cisco Asa, Ssl Vpn, Powershell, Ntp, Bash, Dns, Ips, Zscaler, Aruba, Firewalls, Meraki, Dhcp, Checkpoint, Vpn, Vlan Configuration, Python