66825-1 Cyber Security MSS Network Security

Req ID:

Experience Required: 8-10

Location: THANE MH / HYDERABAD TS

Role Descriptions: Firewall Engineering (Fortigate Check Point & Palo Alto)Design implement and operate NGFW policies NAT security profiles and segmentationManage App ID / User ID (Palo Alto) and Identity Awareness (Check Point)Configure Threat Prevention profiles: IPS Anti Virus Anti Spyware URL filteringPlan and execute rulebase audits clean ups and optimization to reduce risk & latencyPerform upgrades HA/cluster configuration health checks and performance tuningTroubleshoot L3L7 connectivity asymmetric routing path MTU SSL/TLS inspectionWAF & Edge Security (Cloudflare)Configure Cloudflare WAF (Managed Rules custom rules bot mitigation rate limiting)Manage CDN DDoS protection and Zero Trust policies (ZTNA) for applicationsImplement API protection mTLS and secure token based access for servicesOptimize performance & caching while maintaining application securityMonitor attack patterns false positives and tune rules based on application behaviorNAC Operations (Forescout Platform)Deploy and manage Forescout CounterACT for 802.1x / posture / device profilingEnforce zero trust access via VLAN assignments quarantines and policy actionsIntegrate NAC with AD/IDP EDR SIEM vulnerability scanners for contextual controlsMaintain asset inventory device classification (IT/IoT/OT) and posture complianceBuild remediation workflows (e.g. patch isolate notify) with stakeholdersRemote Access & VPNConfigure IPsec/SSL VPNs (GlobalProtect Check Point Remote Access)Implement MFA / SSO / posture checks and split tunnel policiesTroubleshoot tunnel stability DNS leaks routes client postureEnsure scalability and HA for remote access gateways during peak loads

Essential Skills: Firewall Engineering (Fortigate Check Point & Palo Alto)Design implement and operate NGFW policies NAT security profiles and segmentationManage App ID / User ID (Palo Alto) and Identity Awareness (Check Point)Configure Threat Prevention profiles: IPS Anti Virus Anti Spyware URL filteringPlan and execute rulebase audits clean ups and optimization to reduce risk & latencyPerform upgrades HA/cluster configuration health checks and performance tuningTroubleshoot L3L7 connectivity asymmetric routing path MTU SSL/TLS inspectionWAF & Edge Security (Cloudflare)Configure Cloudflare WAF (Managed Rules custom rules bot mitigation rate limiting)Manage CDN DDoS protection and Zero Trust policies (ZTNA) for applicationsImplement API protection mTLS and secure token based access for servicesOptimize performance & caching while maintaining application securityMonitor attack patterns false positives and tune rules based on application behaviorNAC Operations (Forescout Platform)Deploy and manage Forescout CounterACT for 802.1x / posture / device profilingEnforce zero trust access via VLAN assignments quarantines and policy actionsIntegrate NAC with AD/IDP EDR SIEM vulnerability scanners for contextual controlsMaintain asset inventory device classification (IT/IoT/OT) and posture complianceBuild remediation workflows (e.g. patch isolate notify) with stakeholdersRemote Access & VPNConfigure IPsec/SSL VPNs (GlobalProtect Check Point Remote Access)Implement MFA / SSO / posture checks and split tunnel policiesTroubleshoot tunnel stability DNS leaks routes client postureEnsure scalability and HA for remote access gateways during peak loads

Skills: Cyber Security - MSS - Network Security