Network Security Engineer Containment Firewall SME

Tata Consultancy Services Limited
Irving, United States of America
26 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Languages
English
Experience level
Intermediate
Compensation
$ 125K

Job location

Irving, United States of America

Tech stack

Access Control List
Proxy Servers
Cisco PIX
Computer Security
Computer Networks
Network Address Translation
DNS
Hypertext Transfer Protocols (HTTP)
Intrusion Detection Systems
Virtual Private Networks (VPN)
Python
Network Security
Network Segmentation
Network Protocols
Powershell
TCP/IP
Symantec
Websense
Scripting (Bash/Python/Go/Ruby)
Load Balancing
Firewalls (Computer Science)
Information Technology
Palo Alto Networks
Firewall Services Module

Job description

We are seeking a Network Security Engineer to serve as a Subject Matter Expert (SME) in Web Proxy and Firewall rules maintenance, specifically supporting a significant divestiture initiative. This individual contributor will be responsible for the configuration, optimization, and troubleshooting of web proxy and firewall policies, ensuring robust network security and seamless transition of services during the divestiture. The role requires deep technical expertise, meticulous attention to detail, and the ability to work collaboratively within a dynamic environment., * Act as the primary SME for all Web Proxy (e.g., Zscaler, Forcepoint, Blue Coat) and Firewall (e.g., Palo Alto Networks, Check Point,

Cisco ASA) rule sets and configurations.

  • Design, implement, and maintain complex firewall rules and web proxy policies to enforce security controls and meet divestiture

requirements.

  • Perform routine maintenance, updates, and optimization of existing web proxy and firewall rules, ensuring adherence to security

best practices and compliance standards.

  • Provide advanced troubleshooting and incident response support for network security issues related to web proxy and firewall

configurations.

  • Collaborate with network engineering, application, and security operations teams to ensure proper integration and functionality

of security devices during the divestiture process.

  • Assist in the planning and execution of network segmentation and access control list (ACL) migration strategies for separating entities.

  • Develop and maintain comprehensive documentation for network security configurations, policies, and operational procedures.

  • Participate in security audits and provide expert guidance on web proxy and firewall capabilities.

Requirements

Must Have Technical/Functional Skills

  • Technical expertise and hands-on experience with enterprise-grade Firewall platforms (e.g., Palo Alto Networks, Check Point,

Cisco ASA/FTD).

  • Knowledge and practical experience with Web Proxy solutions (e.g., Zscaler, Forcepoint/Websense, Blue Coat/Symantec ProxySG).

  • Understanding of network protocols (TCP/IP, DNS, HTTP/S, VPNs) and network security concepts (e.g., IDS/IPS, VPN, NAT,

load balancing).

  • Proficiency in analyzing network traffic and logs to identify security incidents, troubleshoot connectivity issues, and optimize

performance.

  • Experience with scripting (e.g., Python, PowerShell) for automation of security tasks is a plus.

  • Excellent problem-solving, analytical, and diagnostic capabilities.

  • Strong communication and interpersonal skills, with the ability to articulate complex technical concepts clearly to diverse audiences.

  • Ability to work independently as an SME and as part of a larger technical team., * Education: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related engineering field.

  • Experience:

o Minimum of 3-5 years of dedicated experience in Network Security Engineering. o At least 2-3 years of hands-on experience specifically managing and maintaining Web Proxy and Firewall solutions in an enterprise environment. o Proven experience acting as a Subject Matter Expert in network security domains. o Relevant industry certifications such as CCNA Security, PCNSE (Palo Alto Networks Certified Network Security Engineer), CCSA/CCSE (Check Point Certified Security Administrator/Expert), Zscaler certifications (ZCCA, ZCSE) are desirable. o Required: English fluency (oral and written). Salary Range: $110,000 to $125,000 per year, Qualifications : BACHELOR OF COMPUTER SCIENCE You must create an Indeed account before continuing to the company website to apply

Apply for this position