GMS-Senior-Firewall and VPN Management

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.
Senior Network Security Engineer (Firewall management including VPN Management)
Experience Level: 5–6 Years
We are seeking a Senior Network Security Engineer to lead and execute the end-to-end lifecycle of our firewall and VPN infrastructure. This role is highly hands-on and spans the complete service delivery model: Assess, Build, Transition, and Operations. The ideal candidate will have deep technical expertise in enterprise infrastructure security, a strong understanding of Zero Trust principles, and the ability to maintain continuous security management with minimal disruption to business operations.
Key Responsibilities
Assess (Design & Architecture Review)
Conduct comprehensive assessments of existing network security postures, firewall rulesets, and VPN architectures.
Identify security gaps, vulnerabilities, and optimization opportunities in legacy environments.
Collaborate with architecture teams to design scalable, high-availability (HA) firewall and VPN solutions tailored to enterprise requirements.
Define and document rule-base standardization, routing requirements, and integration points with existing SIEM and logging infrastructure.
Build (Implementation & Deployment)
Deploy and configure Next-Generation Firewalls (NGFW) and VPN gateways from the ground up.
Implement site-to-site (IPsec) and remote-access (SSL/TLS) VPN solutions, ensuring secure and seamless connectivity.
Configure advanced threat protection features, including IPS/IDS, web filtering, and application control.
Establish secure baseline configurations and implement segmentation aligned with Zero Trust Architecture.
Transition (Cutover & Handover)
Plan and execute complex firewall migrations and VPN cutovers with zero-to-minimal downtime.
Develop robust rollback plans and execute User Acceptance Testing (UAT) prior to go-live.
Produce comprehensive "As-Built" documentation, standard operating procedures (SOPs), and topology diagrams.
Conduct knowledge transfer sessions to align support teams on the newly deployed architecture.
Operations & Continuous Management
Serve as the senior technical escalation point for complex firewall and VPN incidents.
Perform continuous firewall rule lifecycle management (rule recertification, unused rule cleanup, and optimization).
Manage firmware upgrades, patch management, and vulnerability remediations for security appliances.
Monitor VPN performance, tunnel stability, and firewall throughput, proactively addressing capacity constraints.
Ensure continuous compliance with industry security frameworks and internal governance standards.
Understanding of ITIL-based Change Management, managing end-to-end change lifecycle activities, CAB coordination, and compliant implementation of infrastructure and application changes.
Required Skills & Qualifications
Experience: 5–6 years of dedicated experience in network security engineering and operations.
Core Technologies: Deep, hands-on expertise with leading NGFW platforms (e.g., Palo Alto Networks, Fortinet, Check Point, or Cisco Firepower).
VPN Mastery: Strong proficiency in configuring, troubleshooting, and scaling IPsec, SSL VPN, GRE, and SD-WAN integrations.
Networking Foundations: Advanced understanding of routing protocols (BGP, OSPF), NAT, VLANs, and TCP/IP fundamentals.
Enterprise Methodologies: Proven experience working through structured Assess, Build, Migrate, and Run phases in complex enterprise environments.
Certifications: Industry-recognized vendor certifications (e.g., PCNSE, NSE 4/7, CCSE) are highly preferred. Foundational security certifications (CISSP, CCSP, or SSCP) are a strong plus.
Soft Skills: Strong analytical problem-solving skills, ability to mentor junior analysts, and excellent documentation practices.
EY | Building a better working world
EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.
Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.
Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.

Work arrangement
No