Network Security Engineer

About the role

We are looking for a Network Security Engineer to design, implement and manage robust security solutions across our on‑premise and cloud environments. The successful candidate will collaborate with cross‑functional teams to ensure the infrastructure remains protected against evolving threats.

Key responsibilities

• Design, implement, and manage network security solutions using Cisco (ASA/FTD) and Fortinet (FortiGate) firewalls.
• Configure, monitor, and maintain firewalls, IDS/IPS, VPNs, and other security tools.
• Set up and manage site‑to‑site and remote access VPNs (IPSec, SSL VPN).
• Monitor network traffic, security logs, and SIEM tools to detect, analyze, and respond to threats.
• Perform vulnerability assessments and support remediation activities.
• Conduct firewall rule reviews, security audits, and ensure compliance with security standards.
• Manage SIEM/SOC integrations for effective threat detection and incident response.
• Manage cloud networking components including VPC/VCN, subnets, routing, gateways, and hybrid connectivity (IPSec VPN, Direct Connect, ExpressRoute, etc.).
• Implement security best practices across cloud platforms (AWS, Azure, OCI).
• Collaborate with cross‑functional teams to ensure secure infrastructure deployment.

Required profile

• Hands‑on experience with Cisco (ASA/FTD) and FortiGate firewalls.
• Strong knowledge of VPN technologies (IPSec, SSL VPN).
• Experience with SIEM tools such as Splunk or similar.
• Good understanding of IDS/IPS, endpoint security, and network security principles.
• Solid knowledge of networking concepts: TCP/IP, DNS, VLANs, routing, switching, and NAT.
• Experience with cloud platforms (AWS, Microsoft Azure, or OCI).
• Familiarity with network monitoring, logging, and troubleshooting tools.
• Understanding of security standards and best practices.
• Strong problem‑solving, analytical, and communication skills.

Required skills

• Cisco ASA/FTD
• FortiGate
• IPSec VPN
• SSL VPN
• Splunk
• SIEM
• IDS/IPS
• TCP/IP
• DNS
• VLANs
• Routing
• Switching
• NAT
• AWS
• Microsoft Azure
• OCI
• VPC
• VCN
• Direct Connect
• ExpressRoute
• Firewall configuration
• Vulnerability assessment