Firewall Engineer

Technokraft Consultancy Services is seeking a highly skilled Network Security Engineer to join our team. The ideal candidate will have strong hands-on experience designing, implementing, troubleshooting, and supporting enterprise network security solutions across on-premises, hybrid, and cloud environments. This role requires deep expertise in firewall technologies, Zero Trust architecture, secure remote access, cloud networking, routing and switching, and enterprise security operations. The successful candidate will work closely with Infrastructure, Cloud, Security, and Operations teams to build and maintain secure, scalable, and highly available network environments. Key Responsibilities

• Design, implement, and support secure enterprise LAN, WAN, VPN, and hybrid cloud network infrastructures.

• Deploy, configure, and manage Next-Generation Firewalls (NGFW) including Palo Alto, Fortinet, Cisco Firepower/ASA, and Check Point.

• Implement and support Zero Trust Network Access (ZTNA) solutions using Zscaler ZIA, Zscaler ZPA, and Palo Alto Prisma Access.

• Design and maintain secure remote access solutions including IPsec VPN, SSL VPN, site-to-site VPN, and cloud connectivity solutions.

• Configure and troubleshoot routing and switching technologies including BGP, OSPF, EIGRP, VLANs, STP, VRFs, and enterprise LAN/WAN architectures.

• Deploy, manage, and optimize Cisco Catalyst and Cisco Nexus (5K, 7K, 9K) switching environments.

• Design and support hybrid cloud and multi-cloud networking solutions across AWS, Azure, and GCP.

• Configure and manage cloud networking components including VPCs, VNets, Route Tables, Security Groups, VPN Gateways, and Transit Connectivity.

• Implement network segmentation, access control policies, Zero Trust frameworks, and security best practices.

• Configure and maintain F5 BIG-IP Load Balancers for high availability, traffic management, and application delivery.

• Utilize Cisco APIs and automation tools to streamline network operations and infrastructure management.

• Monitor network performance, security events, and availability while performing root cause analysis and incident resolution.

• Collaborate with cross-functional teams to implement security standards, compliance requirements, and network modernization initiatives.

• Create and maintain network diagrams, implementation documentation, operational procedures, and technical standards.

• Participate in network upgrades, migrations, maintenance activities, and production support.

• 7+ years of Network Security Engineering and Network Engineering experience.

• Strong hands-on experience with:

• Zscaler Internet Access (ZIA)

• Zscaler Private Access (ZPA)

• Palo Alto Next-Generation Firewalls (NGFW)

• Palo Alto Prisma Access

• Fortinet FortiGate Firewalls

• Cisco Firepower / ASA

• Check Point Firewalls

• Cisco Catalyst Switches

• Cisco Nexus 5000, 7000, and 9000 Series

• F5 BIG-IP Load Balancers

• Strong hands-on experience implementing and supporting:

• LAN/WAN Infrastructure

• VPN Solutions (IPsec, SSL VPN, Site-to-Site)

• Zero Trust Security Architecture

• Network Segmentation and Access Control

• Advanced knowledge of routing and switching protocols:

• BGP

• OSPF

• EIGRP

• VLANs

• STP

• VRFs

• Strong experience with hybrid and multi-cloud networking:

• Microsoft Azure

• AWS

• Google Cloud Platform (GCP)

• Experience utilizing Cisco APIs and network automation tools.

• Strong understanding of TCP/IP, DNS, DHCP, NAT, IPv4/IPv6, and enterprise networking fundamentals.

• Excellent troubleshooting, analytical, and problem-solving skills.

• Strong verbal and written communication skills.

Preferred Qualifications

• Experience with SASE and Zero Trust Network Access (ZTNA) architectures.

• Experience with Python-based network automation.

• Experience supporting large enterprise and multi-site environments.

• Experience with network monitoring, incident response, and root cause analysis.

• Relevant certifications such as:

• CCNA / CCNP

• PCNSA / PCNSE

• NSE Certifications

• Zscaler Certifications

• Azure Networking Certifications

5.05.0 out of 5 stars Remote $107,466.87 - $129,422.47 a year - Full-time