Lead Network Security Engineer
Job Location:
Monthly Salary:
Posted on:
Vacancies:
Job Summary
What success looks like in this role:
Job Summary
We are seeking a highly skilled L3 Network Security Engineer with extensive experience in Palo Alto and Fortinet security technologies Fortinet SD-WAN Panorama Azure Cloud Network Security and Data Center Migration initiatives. The role is responsible for designing implementing managing and optimizing enterprise network security solutions while ensuring the availability performance and security of critical business infrastructure. The ideal candidate will play a key role in complex transformation projects security operations cloud networking and large-scale migration activities.
Roles & Responsibilities
Network Security & Firewall Management
- Design deploy administer and optimize Palo Alto and Fortinet firewall environments.
- Configure and manage security policies NAT VPNs SSL Decryption URL Filtering IPS Anti-Malware and Application Control.
- Perform firewall rule reviews policy optimization software upgrades and security patch management.
- Ensure firewall high availability resilience and compliance with security standards.
Fortinet SD-WAN Administration
- Design implement and maintain Fortinet SD-WAN solutions across enterprise environments.
- Configure Overlay VPN ADVPN SLA-based routing Performance SLAs and dynamic routing protocols.
- Troubleshoot complex SD-WAN connectivity routing and application performance issues.
- Support Hub-and-Spoke and Multi-Hub SD-WAN architectures.
Palo Alto Panorama Management
- Administer Panorama for centralized firewall policy management and governance.
- Manage device groups templates template stacks and software lifecycle activities.
- Implement centralized logging monitoring reporting and compliance controls.
- Maintain backup recovery and disaster recovery processes.
Cloud Network Security
- Design and support Microsoft Azure network security solutions.
- Configure and manage Azure Virtual WAN VNets NSGs UDRs VPN Gateways NVAs and Azure Firewall.
- Support hybrid cloud connectivity and cloud security architecture implementations.
- Troubleshoot cloud networking and security-related issues.
Data Center Migration & Transformation
- Lead network and security activities during data center migration projects.
- Execute firewall and policy migrations while minimizing operational risks.
- Coordinate application cutovers validation testing rollback planning and post-migration support.
- Ensure seamless connectivity and service continuity throughout migration activities.
Routing & Network Infrastructure
- Configure and troubleshoot routing protocols including BGP OSPF Static Routing VRF ECMP and Policy-Based Routing.
- Analyze routing behavior failover mechanisms and network convergence scenarios.
- Support enterprise routing and switching environments.
Security Operations & Incident Management
- Provide L3 support for critical network security incidents and outages.
- Perform Root Cause Analysis (RCA) and implement preventive measures.
- Collaborate with vendors including Palo Alto Fortinet and Microsoft for issue resolution.
- Drive security hardening initiatives and implement industry best practices.
Change & Project Management
- Develop implementation test validation and rollback plans for network security changes.
- Participate in CAB meetings and lead infrastructure upgrades migration and transformation projects.
- Execute planned changes during maintenance windows with minimal business impact.
Documentation & Knowledge Management
- Develop and maintain technical documentation including:
- High-Level and Low-Level Designs (HLD/LLD)
- Standard Operating Procedures (SOPs)
- Runbooks
- Knowledge Base Articles
- Network Diagrams
- As-Built Documentation
- Provide technical mentoring and guidance to L1/L2 engineers.
Required Technical Skills
- Firewall Technologies: Palo Alto Panorama FortiGate FortiManager FortiAnalyzer
- Fortinet Security: SD-WAN ADVPN IPsec VPN SSL VPN HA VDOM
- Cloud Security: Microsoft Azure Azure Firewall Azure Virtual WAN NVA ExpressRoute VPN Gateway
- Routing & Networking: BGP OSPF Static Routing ECMP Route Redistribution TCP/IP VLAN NAT QoS DNS DHCP
- Security Technologies: IPS IDS SSL Inspection URL Filtering Threat Prevention DNS Security
- Monitoring & Management: Panorama FortiManager FortiAnalyzer Azure Monitor Syslog SIEM Integration
Preferred Skills
- Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA)
- Cisco Networking
- F5 Load Balancers
- Infrastructure as Code (Terraform Ansible)
- Python or PowerShell Scripting
- ITIL Change Management
Preferred Certifications
- PCNSE Palo Alto Networks Certified Network Security Engineer
- Fortinet FCP / FCSS Network Security
- Microsoft Azure Administrator (AZ-104)
- Azure Network Engineer Associate (AZ-700)
- CCNP Security
- ITIL Foundation
Key Deliverables
- Manage and enhance Palo Alto and Fortinet security environments.
- Administer Panorama FortiManager and FortiAnalyzer platforms.
- Design and support enterprise SD-WAN and cloud security solutions.
- Lead security infrastructure upgrades migrations and transformation initiatives.
- Provide advanced troubleshooting and incident response support.
- Drive compliance governance and continuous improvement across network security operations.
#LI-SK2
You will be successful in this role if you have:
BA/BS degree and 6-8 years relevant experience OR equivalent combination of education and experienceUnisys is proud to be an equal opportunity employer that considers all qualified applicants without regard to age blood type caste citizenship color disability family medical history family status ethnicity gender gender expression gender identity genetic information marital status national origin parental status pregnancy race religion sex sexual orientation transgender status veteran status or any other category protected by law.
Local employment practices and rights may vary by jurisdiction and are subject to applicable local laws. This commitment includes our efforts to provide for all those who seek to express interest in employment the opportunity to participate without barriers.
If you are a US job seeker unable to review the job opportunities herein or cannot otherwise complete your expression of interest without additional assistance and would like to discuss a request for reasonable accommodation please contact our Global Recruiting organization at . US job seekers can find more information about Unisys EEO commitment here.
Required Experience:
IC
About Company
Unisys is a global information technology company that specializes in providing industry-focused solutions integrated with leading-edge security to clients in the government, financial services and commercial markets. Unisys offerings include security solutions, advanced data analytic ... View more
