Network Security Engineer SME

Job Description
Firewall Administration & Architecture
Deployment & Config: Install, configure, and maintain Palo Alto (PA-Series) and Fortinet (FortiGate) firewalls.
Policy Management: Design and audit firewall rule bases, security profiles, and NAT policies.
Centralised Management: Manage large-scale environments using Palo Alto Panorama and Fortinet FortiManager / FortiAnalyzer.
VPN Management: Establish and secure Site-to-Site IPsec VPNs and Remote Access VPNs (GlobalProtect, FortiClient).
Network Security Operations
Threat Mitigation: Configure advanced security features including IPS/IDS, URL filtering, Anti-
Upgrade & Patching: Perform routine firmware upgrades, hotfixes, and vulnerability patching.
Monitoring: Analyze security logs to detect anomalies, unauthorized access, or potential network breaches.
High Availability: Maintain redundant firewall clusters (HA Active/Passive and Active/Active topologies).
Traffic Management & Core Network Services (DDI)
Application Delivery: Configure F5 BIG-IP LTM (Local Traffic Manager), including VIPs, Pools, Monitors, SSL offloading, and advanced iRules.
IPAM & DDI: Manage Infoblox Grid Manager to run high-availability DNS, DHCP, and IP Address Management (IPAM).
Network Automation: Maintain network health by automating IP allocations and DNS entries.
Edge Architecture & WAN Edge
SD-WAN Fabric: Design, deploy, and optimize SD-WAN solutions (Fortinet Secure SD-WAN or Palo Alto Prisma SD-WAN) to replace traditional MPLS.
Traffic Steering: Define application-aware routing paths to guarantee performance for critical SaaS and cloud workloads.
Hybrid Connectivity: Maintain secure Site-to-Site IPsec VPN overlays across the SD-WAN fabric.
Troubleshooting & Support
Incident Response: Act as a Tier 2/3 escalation point for complex network security issues and outages.
Packet Analysis: Use tools like Wireshark and built-in CLI packet captures to diagnose complex routing or traffic drops.
Performance Tuning: Monitor firewall CPU, memory, and session counts to optimize throughput
Troubleshooting & Architecture
Tier 3 Escalation: Diagnose complex outages involving multi-vendor paths (e.g., F5 VIP to Firewall to SD-WAN edge).
Packet Diagnostics: Master packet capture tools (Wireshark, tcpdump) to resolve deep-layer routing, translation, or load-balancing issues.
Responsibilities
Firewall Administration & Architecture
Deployment & Config: Install, configure, and maintain Palo Alto (PA-Series) and Fortinet (FortiGate) firewalls.
Policy Management: Design and audit firewall rule bases, security profiles, and NAT policies.
Centralised Management: Manage large-scale environments using Palo Alto Panorama and Fortinet FortiManager / FortiAnalyzer.
VPN Management: Establish and secure Site-to-Site IPsec VPNs and Remote Access VPNs (GlobalProtect, FortiClient).
Network Security Operations
Threat Mitigation: Configure advanced security features including IPS/IDS, URL filtering, Anti-
Upgrade & Patching: Perform routine firmware upgrades, hotfixes, and vulnerability patching.
Monitoring: Analyze security logs to detect anomalies, unauthorized access, or potential network breaches.
High Availability: Maintain redundant firewall clusters (HA Active/Passive and Active/Active topologies).
Traffic Management & Core Network Services (DDI)
Application Delivery: Configure F5 BIG-IP LTM (Local Traffic Manager), including VIPs, Pools, Monitors, SSL offloading, and advanced iRules.
IPAM & DDI: Manage Infoblox Grid Manager to run high-availability DNS, DHCP, and IP Address Management (IPAM).
Network Automation: Maintain network health by automating IP allocations and DNS entries.
Edge Architecture & WAN Edge
SD-WAN Fabric: Design, deploy, and optimize SD-WAN solutions (Fortinet Secure SD-WAN or Palo Alto Prisma SD-WAN) to replace traditional MPLS.
Traffic Steering: Define application-aware routing paths to guarantee performance for critical SaaS and cloud workloads.
Hybrid Connectivity: Maintain secure Site-to-Site IPsec VPN overlays across the SD-WAN fabric.
Troubleshooting & Support
Incident Response: Act as a Tier 2/3 escalation point for complex network security issues and outages.
Packet Analysis: Use tools like Wireshark and built-in CLI packet captures to diagnose complex routing or traffic drops.
Performance Tuning: Monitor firewall CPU, memory, and session counts to optimize throughput
Troubleshooting & Architecture
Tier 3 Escalation: Diagnose complex outages involving multi-vendor paths (e.g., F5 VIP to Firewall to SD-WAN edge).
Packet Diagnostics: Master packet capture tools (Wireshark, tcpdump) to resolve deep-layer routing, translation, or load-balancing issues.
Qualifications
Firewall Administration & Architecture
Deployment & Config: Install, configure, and maintain Palo Alto (PA-Series) and Fortinet (FortiGate) firewalls.
Policy Management: Design and audit firewall rule bases, security profiles, and NAT policies.
Centralised Management: Manage large-scale environments using Palo Alto Panorama and Fortinet FortiManager / FortiAnalyzer.
VPN Management: Establish and secure Site-to-Site IPsec VPNs and Remote Access VPNs (GlobalProtect, FortiClient).
Network Security Operations
Threat Mitigation: Configure advanced security features including IPS/IDS, URL filtering, Anti-
Upgrade & Patching: Perform routine firmware upgrades, hotfixes, and vulnerability patching.
Monitoring: Analyze security logs to detect anomalies, unauthorized access, or potential network breaches.
High Availability: Maintain redundant firewall clusters (HA Active/Passive and Active/Active topologies).
Traffic Management & Core Network Services (DDI)
Application Delivery: Configure F5 BIG-IP LTM (Local Traffic Manager), including VIPs, Pools, Monitors, SSL offloading, and advanced iRules.
IPAM & DDI: Manage Infoblox Grid Manager to run high-availability DNS, DHCP, and IP Address Management (IPAM).
Network Automation: Maintain network health by automating IP allocations and DNS entries.
Edge Architecture & WAN Edge
SD-WAN Fabric: Design, deploy, and optimize SD-WAN solutions (Fortinet Secure SD-WAN or Palo Alto Prisma SD-WAN) to replace traditional MPLS.
Traffic Steering: Define application-aware routing paths to guarantee performance for critical SaaS and cloud workloads.
Hybrid Connectivity: Maintain secure Site-to-Site IPsec VPN overlays across the SD-WAN fabric.
Troubleshooting & Support
Incident Response: Act as a Tier 2/3 escalation point for complex network security issues and outages.
Packet Analysis: Use tools like Wireshark and built-in CLI packet captures to diagnose complex routing or traffic drops.
Performance Tuning: Monitor firewall CPU, memory, and session counts to optimize throughput
Troubleshooting & Architecture
Tier 3 Escalation: Diagnose complex outages involving multi-vendor paths (e.g., F5 VIP to Firewall to SD-WAN edge).
Packet Diagnostics: Master packet capture tools (Wireshark, tcpdump) to resolve deep-layer routing, translation, or load-balancing issues.
About Us
At Zensar, we’re “experience-led everything”. We are committed to conceptualizing, designing, engineering, marketing, and managing digital solutions and experiences for over 130 leading enterprises. We are a company driven by a bold purpose: Together, we shape experiences for better futures. Whether for our clients, our people, or the world around us, this belief powers everything we do. At the heart of our culture is ONE with Client - a set of four core values that reflect who we are and how we work: One Zensar, Nurturing, Empowering, and Client Focus.
Part of the $4.8 billion RPG Group, we’re a community of 10,000+ innovators across 30+ global locations, including Milpitas, Seattle, Princeton, Cape Town, London, Zurich, Singapore, and Mexico City. Explore Life at Zensar and join us to Grow. Own. Achieve. Learn. to be the best version of yourself.
We believe the best work happens when individuality is celebrated, growth is encouraged, and well-being is prioritized. We are an equal employment opportunity (EEO) and affirmative action employer, committed to creating an inclusive workplace. All qualified applicants will be considered without regard to race, creed, color, ancestry, religion, sex, national origin, citizenship, age, sexual orientation, gender identity, disability, marital status, family medical leave status, or protected veteran status.

Work arrangement
No