Network Security Engineer / Network Security Tools Specialist

Job Title Network Security Engineer / Network Security Tools Specialist

Role Overview

Responsible for implementing, administering, configuring, monitoring, and troubleshooting enterprise

network security tools. The role includes firewall management, secure connectivity, intrusion

prevention, network segmentation, policy administration, and support for hybrid network security

environments. The candidate should have hands-on experience in enterprise security tools and the

ability to independently manage network security changes, incidents, and operational improvements.

Key Responsibilities

• Configure and manage enterprise firewalls, including access control policies, NAT, VPN, and

security profiles.

• Implement firewall rule changes according to approved change management procedures.
• Review firewall rules for least privilege, redundancy, and unnecessary access.
• Troubleshoot blocked traffic, connectivity issues, and policy-related incidents.
• Maintain firewall configurations, backups, and documentation.
• Participate in firewall upgrades and migration projects.
• Monitor firewall, IPS/IDS, proxy, and secure web gateway alerts.
• Investigate suspicious network traffic and unauthorized access attempts.
• Analyze network flows, packet captures, and security events.
• Coordinate with SOC teams to investigate security incidents.
• Implement network segmentation across production, non-production, DMZ, and restricted

environments.

• Support zero-trust network access and micro-segmentation initiatives.
• Review network security architecture and identify potential security gaps.
• Support secure connectivity between on-premises, cloud, and remote environments.
• Configure and troubleshoot site-to-site and remote-access VPNs.
• Support IPsec, SSL VPN, and secure administrative access.
• Troubleshoot routing, DNS, NAT, and connectivity dependencies.
• Coordinate with network teams for hybrid connectivity.
• Maintain network security configuration documentation.
• Participate in vulnerability remediation for network security devices.
• Support audit evidence collection and security compliance activities.
• Conduct periodic rule reviews and configuration assessments.

Tools and Technologies

Category Tools

Firewalls Palo Alto Networks, Fortinet FortiGate, Cisco

IDS/IPSPalo Alto Threat Prevention, FortiGate IPS, Snort / Suricata

Secure Web Gateway / Proxy Zscaler, Forcepoint, Broadcom ProxySG

Network Access Control Cisco ISE, Aruba ClearPass

VPN / ZTNA Palo Alto GlobalProtect, FortiClient, Zscaler ZPA

Network Analysis Wireshark, tcpdump

Cloud Networking AWS Security Groups, AWS Network Firewall, Azure Firewall, NSG

Technical Skills

• TCP/IP, DNS, DHCP, routing, switching, and subnetting.
• Firewall policy management and network security architecture.
• NAT, VPN, IPS/IDS, and web proxy concepts.
• Network troubleshooting using packet captures and flow logs.
• High availability, firewall clustering, and configuration backups.
• Cloud networking and hybrid connectivity.
• ITIL change and incident management processes.