Network Security Engineer

Overview

Network security role focused on firewall administration and troubleshooting across Fortinet and Palo Alto platforms, with supporting cloud networking and security operations responsibilities. Works alongside senior security engineers.

What you'll do

• Create, review and troubleshoot Fortinet FortiGate firewall policies, including source, destination, service, NAT and security profiles.
• Configure and maintain interfaces, zones and VDOMs, including HA pairs such as FGT-A/B.
• Configure and troubleshoot routing (static routes, BGP, OSPF, policy-based routing) and basic VPNs (IPsec site-to-site, SSL VPN).
• Perform HA status checks, failover validation and config sync checks.
• Diagnose session and traffic issues using diagnose sniffer packet, diagnose debug flow, get router info bgp and session table review.
• Review logs and analyze threat and event data via FortiAnalyzer or FortiGate logs.
• Plan firmware upgrades and perform config backup and restore.
• Navigate PAN-OS (web UI and CLI) and manage security policy, NAT policy and zone-based configuration.
• Manage security profiles (Antivirus, Anti-Spyware, URL Filtering, File Blocking, WildFire).
• Configure and check routing (static, BGP, OSPF) on Palo Alto virtual routers, IPsec tunnels and GlobalProtect basics, and HA status and failover.
• Use troubleshooting tools including show session all, test security-policy-match, packet-capture, show routing route, debug dataplane, and system and traffic logs.
• Support Panorama for centralized management and plan content and PAN-OS upgrades.
• Apply stateful inspection, NAT (SNAT, DNAT, PAT) and zone-based design concepts.
• Troubleshoot using an OSI layer approach (ping, traceroute, packet capture, logs).
• Diagnose asymmetric routing and dropped sessions.
• Support Microsoft Azure networking: VNets, peering, Route Server, ExpressRoute, VPN Gateway, NSGs and UDR route tables.
• Support firewall NVAs deployed as VMs in hub-spoke topologies, including Route Server and BGP peer status and route checks.
• Troubleshoot Azure using the Portal, Azure CLI and Network Watcher (connection troubleshoot, NSG flow logs, IP flow verify).
• Harden security policy and design least-privilege rules.
• Triage threat logs and incidents (IPS, malware, malicious URL, blocked traffic) and support incident response, including containment, evidence collection and escalation.
• Follow approved change plans, runbooks and rollback steps for adds, moves and changes.
• Maintain operating procedures, configuration records and network diagrams.
• Track requests and work using ServiceNow, Jira or similar tools.
• Support cutovers, parallel runs and knowledge transfer during transitions and migrations.
• Collect routine firewall and security metrics and produce weekly or monthly reports for senior engineers and management.

What you'll need

• BA/BS degree and 0-2 years of relevant experience, OR an equivalent combination of education and experience.
• Basic troubleshooting skills on Fortinet and Palo Alto firewalls; any firewall experience.
• Understanding of routing and switching fundamentals: VLANs, subnetting, ARP and L2 extension concepts.
• Understanding of BGP fundamentals (peering, AS-path, local preference, route advertisement) and IPsec and TLS basics.
• Understanding of the cybersecurity lifecycle: identify, protect, detect, respond, recover.

Details

• Location: Bangalore, KA, India.