Job Description

The Network Engineer will provide expert support for firewall and network security operations in a managed services capacity, ensuring the stability and security of the clients hybrid cloud environment. The role focuses on firewall management (multi-vendor), Azure networking, and Zero Trust compliance as part of a managed services team.

Key Responsibilities:

-------------------------

Firewall Management (Multi-Vendor & Azure)

Deploy, configure, and maintain enterprise firewalls (including but not limited to Palo Alto, Azure Firewall) in HA mode for North-South/East-West traffic. Implement IP/MAC whitelisting, threat prevention, and centralized policy enforcement. Troubleshoot connectivity, performance, and security issues across firewall platforms.

Azure Firewall:

+ Configure policies for internal traffic control (East-West) and hybrid cloud scenarios. + Optimize rules for cost/performance (SNAT, DNAT, application rules).
+ Integrate with Azure Monitor/Sentinel for logging and threat detection.

Azure Networking & Security

Manage Azure Application Gateway (WAF), VNETs, subnets, NSGs, UDRs, and private endpoints for secure workload isolation. Support ExpressRoute/VPN/MPLS connectivity between on-premises and Azure. Implement Zero Trust principles (micro-segmentation, least-privilege access).

Monitoring & Compliance

Monitor firewall logs, traffic patterns, and security alerts using Azure Sentinel, Log Analytics, or equivalent tools. Maintain documentation for firewall rules, network diagrams, and SOPs.

Incident & Troubleshooting (L2 Support)

Resolve network/firewall incidents (e.g., blocked traffic, misconfigurations). Collaborate with security teams on threat investigations. Participate in on-call rotations for critical outages (as required).

Required Skills & Experience:

----------------------------------

6+ years of enterprise networking experience, with at least 3+ years in Azure cloud networking.

Firewall Expertise:

+ Hands-on experience with enterprise firewalls (Palo Alto, Check Point, Fortinet, or Azure Firewall). + Policy management, diagnostics, and logging.

Azure Networking:

+ VNETs, Application Gateway (WAF), Load Balancers, DNS, Private Link. + ExpressRoute/VPN/MPLS for hybrid connectivity.

Security & Monitoring:

+ Azure Sentinel, Log Analytics, NSG Flow Logs. + Zero Trust architecture (micro-segmentation, RBAC).

Nice-to-Have:

+ Certifications such as PCNSE, AZ-700 (Azure Networking), or equivalent.

Soft Skills

Strong analytical and problem-solving skills. * Ability to work with cross-functional teams (security, cloud, DevOps).