Senior Network Engineer

The Network Engineer will provide expert support for firewall and network security operations in a managed services capacity, ensuring the stability and security of the clients hybrid cloud environment. The role focuses on firewall management (multi-vendor), Azure networking, and Zero Trust compliance as part of a managed services team.

Key Responsibilities:

1. Firewall Management (Multi-Vendor & Azure)
• Deploy, configure, and maintain enterprise firewalls (including but not limited to Palo Alto, Azure Firewall) in HA mode for North-South/East-West traffic.
• Implement IP/MAC whitelisting, threat prevention, and centralized policy enforcement.
• Troubleshoot connectivity, performance, and security issues across firewall platforms.
• Azure Firewall:
• Configure policies for internal traffic control (East-West) and hybrid cloud scenarios.
• Optimize rules for cost/performance (SNAT, DNAT, application rules).
• Integrate with Azure Monitor/Sentinel for logging and threat detection.
2. Azure Networking & Security
• Manage Azure Application Gateway (WAF), VNETs, subnets, NSGs, UDRs, and private endpoints for secure workload isolation.
• Support ExpressRoute/VPN/MPLS connectivity between on-premises and Azure.
• Implement Zero Trust principles (micro-segmentation, least-privilege access).
3. Monitoring & Compliance
• Monitor firewall logs, traffic patterns, and security alerts using Azure Sentinel, Log Analytics, or equivalent tools.
• Maintain documentation for firewall rules, network diagrams, and SOPs.
4. Incident & Troubleshooting (L2 Support)
• Resolve network/firewall incidents (e.g., blocked traffic, misconfigurations).
• Collaborate with security teams on threat investigations.
• Participate in on-call rotations for critical outages (as required).

Required Skills & Experience:

• 6+ years of enterprise networking experience, with at least 3+ years in Azure cloud networking.
• Firewall Expertise:
• Hands-on experience with enterprise firewalls (Palo Alto, Check Point, Fortinet, or Azure Firewall).
• Policy management, diagnostics, and logging.
• Azure Networking:
• VNETs, Application Gateway (WAF), Load Balancers, DNS, Private Link.
• ExpressRoute/VPN/MPLS for hybrid connectivity.
• Security & Monitoring:
• Azure Sentinel, Log Analytics, NSG Flow Logs.
• Zero Trust architecture (micro-segmentation, RBAC).
• Nice-to-Have:
• Certifications such as PCNSE, AZ-700 (Azure Networking), or equivalent.

Soft Skills

• Strong analytical and problem-solving skills.
• Ability to work with cross-functional teams (security, cloud, DevOps).