> Markdown version of [/jobs/ext/2826215-network-engineer-firewall-specialist](https://www.wearedevelopers.com/jobs/ext/2826215-network-engineer-firewall-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Network Engineer (Firewall Specialist) - **Company:** Tech Mahindra Limited - **Location:** United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Application Firewall, Microsoft Azure, Border Gateway Protocol, Cloud Computing, Cloud Computing Security, Complex Networks, DDoS Mitigation, Network Address Translation, Enhanced Interior Gateway Routing Protocol, Internet Protocol Security (IP SEC), Intrusion Detection Systems, Virtual Private Networks (VPN), Network Security, Network Segmentation, Open Shortest Path First (OSPF), Remote Access Technology, Zero Trust Network Access, SAP Sales and Distribution, Web Application Security, TCP/IP, Virtual Local Area Networks, Google Cloud, Firewalls (Computer Science), Palo Alto Networks, Patch Management, Fortinet, Routing & Switching, Firepower, Firewall Services Module, Cisco, SSL VPN - **Published:** September 10, 2026 - **Apply:** https://www.dice.com/job-detail/073543db-fb18-46bc-a176-934a70e32510 ## About the Role * Strong hands-on experience with enterprise firewalls; ü Palo Alto Networks ü Fortinet FortiGate ü Cisco Firepower/ASA ü Check Point * Deep understanding of: ü Routing & Switching ü TCP/IP, BGP, OSPF, EIGRP ü NAT, ACLs, VLANs ü IPsec VPN, SSL VPN ü IDS/IPS ü URL Filtering ü Application Control ü Web Security ü DDoS Protection * Experience with Security Management Platforms: ü Panorama ü FortiManager ü Cisco FMC ü Check Point Smart Console ü Knowledge of Cloud Security (Azure, AWS, Google Cloud Platform) is preferred. ü Understanding of Zero Trust, SASE, SD WAN, and Network Segmentation. Experience * 8+ years of experience in Network Security and Firewall Administration. * Proven experience supporting large scale enterprise environments. * Experience handling critical P1/P2 incidents and security escalations. * Exposure to security audits, risk assessments, and compliance frameworks. Certifications (Preferred) * PCNSE (Palo Alto) * NSE 4/5/7 (Fortinet) * CCNP Security * CCIE Security * CISSP * CISM ## Description The Firewall & Security Engineer (L3) is responsible for the design, implementation, administration, optimization, and support of enterprise security infrastructure. The role serves as the highest level of technical escalation for firewall, VPN, network security, and security related incident management while ensuring availability, performance, compliance, and security best practices., * Provide L3 support for enterprise firewall and security environments. * Design, implement, and manage firewall policies, NAT rules, VPNs, and security controls. * Troubleshoot complex network security incidents and perform root cause analysis. * Lead major incident resolution and provide expert level technical guidance. * Implement and maintain site to site VPN, remote access VPN, and IPsec solutions. * Perform firewall upgrades, migrations, patch management, and platform lifecycle activities. * Review and optimize security policies to improve security posture and operational efficiency. * Collaborate with Network, Cloud, SOC, and Application teams for security integration. * Support audit, compliance, and regulatory requirements. * Develop technical documentation, SOPs, HLDs, LLDs, and operational runbooks. * Mentor L1/L2 engineers and provide technical leadership across projects. ## Related Videos - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [An Applied Introduction to eBPF with Go](https://www.wearedevelopers.com/videos/1075-an-applied-introduction-to-ebpf-with-go) - [Your Infrastructure Is Not a Playground: AI Agents for Infra Done Right](https://www.wearedevelopers.com/videos/2084-your-infrastructure-is-not-a-playground-ai-agents-for-infra-done-right) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Turning Container security up to 11 with Capabilities](https://www.wearedevelopers.com/videos/718-turning-container-security-up-to-11-with-capabilities) ## Related Articles - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [How Much FAANG Companies Actually Pay Software Engineers in 2025](https://www.wearedevelopers.com/magazine/230-how-much-faang-companies-actually-pay-software-engineers-in-2025) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)