TECHNICAL LEAD - Cisco

Job Profile: Technical Lead - Network Security Engineer : Firewall Administration
Experience required: 5 to 8 years
Qualification: Any Graduate
Work Location: Bangalore
Communication: Good Comms Required
Joining timeline: 15-30days
Mandatory Skills:  

• VPN & Access: Site-to-Site VPN, SSL VPN, MFA,
• Firewalls: Palo Alto, Fortinet, Sophos, Check Point, Cisco ASA/FTD, Meraki
• Networking: TCP/IP, DNS, DHCP, VLAN, STP, Routing & Switching, OSPF, BGP
• Tools: Wireshark, Network Monitoring & Logging
• Systems: Linux (Ubuntu), Windows, Mac Os

Job Description:
Key Responsibilities:

Network Support & Maintenance

• Provide day-to-day support for Cisco Catalyst switches, focusing on basic port configurations, VLAN assignments, and hardware health monitoring to ensure consistent connectivity.

Firewall Operations

• Assist with the routine administration of Cisco Firepower (FTD) and ASA. Primary tasks include basic rule updates, monitoring VPN connectivity, and supporting scheduled patching activities.

Wireless Support

• Support the wireless environment by monitoring Cisco Meraki APs via the cloud dashboard. Troubleshoot basic office connectivity issues and access points as needed.

Network Monitoring & Performance

• Monitor LAN/WAN performance to identify latency or throughput issues. Escalate complex outages to senior engineering teams while maintaining basic documentation of bandwidth usage.

Palo Alto Networks

• Configure and manage Palo Alto next-gen firewalls (PA-Series) including security policies, NAT rules, App-ID, User-ID, and Content-ID
• Manage Panorama for centralized policy deployment, logging, and multi-firewall administration
• Implement and troubleshoot GlobalProtect VPN for remote access
• Configure Zone Protection Profiles, threat prevention, URL filtering, and WildFire integration

Fortinet FortiGate

• Deploy and administer FortiGate firewalls for perimeter and internal segmentation security
• Configure security policies, VPN tunnels (IPSec/SSL), SD-WAN, and UTM features (IPS, AV, web filtering)
• Manage High Availability (HA) clusters and firmware upgrades
• Troubleshoot connectivity, routing, and policy-based issues using FortiOS CLI/GUI

FortiManager

• Centrally manage multiple FortiGate devices through FortiManager for policy provisioning and version control
• Push configuration templates, monitor device health, and manage firmware updates across the fleet
• Maintain change management and audit logs for firewall rule modifications

Cisco Meraki

• Administer Meraki MX security appliances via the cloud-based Dashboard
• Configure site-to-site VPN, content filtering, IDS/IPS, and SD-WAN policies
• Monitor network health, client activity, and generate reports using Meraki's centralized management

Cisco FTD (Firepower Threat Defense)

• Manage Cisco FTD firewalls via Firepower Management Center (FMC)
• Configure access control policies, intrusion prevention, malware protection, and SSL decryption
• Perform troubleshooting using packet tracer, capture tools, and FTD CLI diagnostics

Sophos

• Deploy and manage Sophos XG/XGS firewalls, including Synchronized Security with Sophos endpoints
• Configure firewall rules, web/application control, and VPN (SSL/IPSec)
• Monitor threats via Sophos Central and respond to incidents

General/Cross-Platform:

• Conduct firewall rule audits, cleanup, and optimization across vendors
• Ensure compliance with security policies and industry standards (PCI-DSS, ISO 27001, etc.)
• Document network topology, firewall rulesets, and change requests
• Collaborate with SOC/NOC teams for incident response and threat mitigation