About the role
We are looking for an experienced Network Security Engineer to join our Global Cyber Security team. The role involves managing and securing enterprise network security platforms, primarily Check Point Firewalls and Zscaler, with basic operational support for Cloudflare WAF.
Responsibilities:
- Administer and manage Check Point firewalls, including firewall policies, rules, NAT, VPNs, SmartConsole and Smart-1 Cloud.
- Manage Zscaler ZIA/ZPA policies, web filtering, application control, SSL inspection and secure application access.
- Provide basic operational support for Cloudflare WAF, including rule management, traffic monitoring and troubleshooting.
- Review and implement security changes, troubleshoot connectivity issues, and maintain firewall and security policies.
- Support network segmentation across IT, OT and third-party environments.
- Assist with vulnerability remediation, security investigations, incident response, logging and monitoring.
- Conduct firewall rule reviews, remove obsolete or overly permissive rules, and maintain technical documentation.
- Coordinate with global IT, infrastructure, application teams and external vendors to improve security operations.
Requirements:
- Minimum 5 years of hands-on experience in Network Security Engineering.
- Strong practical experience with Check Point Firewalls.
- Hands-on experience administering Zscaler ZIA and/or ZPA.
- Knowledge of firewall policies, NAT, VPN, routing and network segmentation.
- Understanding of TCP/IP, DNS, HTTP/HTTPS and TLS.
- Basic knowledge of WAF technologies and web application security.
- Experience with network security monitoring, logging and troubleshooting.
- Familiarity with formal change and incident management processes.
- Understanding of IT/OT network segmentation; network security automation is an added advantage.
- Strong analytical, problem-solving, communication and documentation skills.
- Ability to work independently and collaborate with global, distributed teams.
- Education: BE/BTech in a related field.