L3 / LEAD Network Security

Primary Skill - (Network Security): - Palo Alto Firewalls

Responsibilities:

• Having minimum 8 to 10 years of experience in firewalls like Palo Alto, Juniper, Cisco ASA and expertise in Palo Alto Firewalls
• Must have strong experience with Palo Alto
• Must have strong experience with PaloAlto IPS (PA-2050 & 3020 Series) & IDS

• Expert level knowledge of Palo Alto security features including Threat Prevention, App-ID, Content-ID, SSL decryption, WildFire, Traps, URL filtering, GlobalProtect and Panorama
• Understanding of network security concepts such as advanced persistent threats, intrusion prevention, cyber kill chain, zero-day malware, network sandboxing, and targeted attacks
• Strong network troubleshooting skills with ability to perform manual packet analysis using tcpdump and Wireshark
• Must have strong experience with Cisco IPS
• Manage the Authentication/authorization servers

• Maintain an in-depth knowledge of industry best practices, concepts and procedures
• Work with design teams to review operational readiness of new projects, and contribute to solution designs and develop
• Manage and maintain the firewalls /IPS across the enterprise
• Troubleshoot internal and external connectivity and security issues
• implementations, firewall configuration changes, and projects requiring security operational support

• Assist the end-user, other IT professionals, and external customers in requesting security variances and implementation of subsequent configuration change requests
• Good Communication Skills and have good experience in managing Network Delivery from End to End.
• Must be good Team Manager to bridge between Customer and HCL. Manage escalations.
• Should have experience to work on offshore and Onshore model
• Guide the Network team during any Major issues like P1.
• Should have experience on writing and reviewing RCAs.

Secondary Skill - Cisco ASA, Bluecoat Proxy, Cisco ACS (AAA), Symantec PGP, WinPGP

Responsibilities:

• Must have strong experience with Palo Alto / ASA Firewall

• Manage and administer the firewall devices (Cisco ASA 5585)
• Assist in policy management, patch management, vulnerability management and incident management activities
• Hands on experience on AAA
• Create/update/Implement change requests related to Proxy, AAA, IPS
• Protects system by defining access privileges, control structures, and resources. Recognizes problems by identifying abnormalities reporting violations

• Implements security improvements by assessing current situation
• Determines security violations and inefficiencies by conducting periodic audits. Upgrades system by implementing and maintaining security controls