CyberSecurity Specialist - CNI

#Cyber Security Experts#

Job Summary

This role focuses on designing deploying and operating secure cloud network perimeters for critical hi tech environments using Azure Firewall AWS Firewall Manager and Palo Alto next generation firewalls. The specialist will safeguard connectivity across hybrid architectures ensure compliance with enterprise security standards and reduce cyber risk exposure for critical networked infrastructure.

Responsibilities

• Design secure cloud network perimeter architectures that protect critical hi tech workloads by using Azure Firewall AWS Firewall Manager and Palo Alto next generation firewalls in complex hybrid environments
• Implement advanced firewall policies and rule sets that minimize attack surfaces while maintaining efficient connectivity for business critical applications and services
• Monitor firewall logs and network traffic patterns to detect anomalies investigate suspicious activities and recommend targeted remediation actions that reduce cyber risk
• Develop standardized firewall configuration baselines that align with organizational security policies and regulatory expectations relevant to critical networked infrastructure
• Coordinate firewall change requests by validating requirements assessing security impact and executing changes in a controlled manner to ensure service stability
• Optimize firewall performance by tuning rules leveraging security services and eliminating redundant objects in order to improve throughput and latency for users
• Collaborate with cloud platform teams and application owners to integrate security controls at design time and prevent misconfigurations in Azure and AWS environments
• Conduct periodic access reviews on firewall policies to confirm least privilege access remove obsolete rules and strengthen overall network segmentation across environments
• Create detailed technical documentation covering firewall designs runbooks troubleshooting steps and operational procedures that enable consistent support by operations teams
• Perform impact assessments for new projects or architecture changes by evaluating network security implications and proposing mitigations that align with enterprise risk posture
• Assist incident response teams by providing network context extracting firewall evidence and implementing containment rules that help limit the spread of security events
• Implement automation scripts using approved tools to simplify policy deployments validation checks and compliance reporting across multi cloud firewall environments
• Provide mentoring and knowledge sharing to teammates on best practices for cloud network security and secure configuration of Azure Firewall AWS Firewall Manager and Palo Alto platforms

Qualifications

• JOB ROLE       :           Cyber Security Engineer (L3)

•        Primary: ZScaler-ZPA, ZIA- Zscaler Internet Access

•        Secondary: Palo Alto firewalls, Cisco ASA, Cloudflare WAF, Zscaler Internet Access. Cisco ISE and RSA Secure ID

•  

• 1.1       ESSENTIAL QUALIFICATION: 

•        Graduate with minimum 8+ years of relevant experience in cyber security support in the technology areas like Firewall Management, Proxy/URL Filtering, IDS/IPS, WAF

•        Hands on product administration/management/L3/L4 level troubleshooting/reporting – ZScaler-ZPA, Cisco ASA, Palo Alto firewalls, Cloudflare WAF, Zscaler Internet Access. Cisco ISE and RSA Secure ID

•        Make sure candidate has implemented ZPA projects experience.

•        Desired Process Certifications:  ITIL V3 foundation

•        Preferred Technology Certifications: CCNA, CCNA Security, CCSP, Palo Alto (ACE), Palo Alto (PCNSE) / similar

•        sprotection

•        Ready to work in 24x7 rotational shifts.

•        Team Management

•        Good knowledge on handling Security related Domains

•        Ability to hold the team in technical front during issues

•    Strong reporting capabilities

   

Certifications Required

Certified Information Systems Security Professional or equivalent cloud network security certification such as vendor specific firewall credentials