Lead Network Security Engineer

Lead Network Security Engineer

Role Summary:

The Lead Network Security Engineer will be responsible for designing, implementing, and maintaining our network security infrastructure. This role will focus on Palo Alto Networks technology to ensure the highest levels of security and performance for our organization's network. The ideal candidate will possess extensive experience in network security, strong analytical skills, and the ability to work effectively in a collaborative team environment.

Job Responsibility:

• Design, deploy, and manage network security solutions using Palo Alto Networks technologies.
• Develop and implement network security policies, procedures, and best practices.
• Monitor and analyze network traffic for security threats and vulnerabilities.
• Perform regular security assessments, penetration testing, and vulnerability scanning.
• Respond to and mitigate security incidents and breaches.
• Collaborate with IT and security teams to ensure seamless integration of security measures.
• Maintain up-to-date knowledge of the latest security threats, trends, and technologies.
• Provide technical guidance and mentorship to junior network security engineers.
• Prepare and present detailed reports on network security status and incidents.

Job Qualification:

• Bachelor’s degree in computer science, Information Technology, or a related field.
• 5+ years profound knowledge and experience in working in an Enterprise Network infrastructure.
• Professional certifications such as PCNSE (Palo Alto Networks Certified Network Security Engineer) are highly desirable. Expert level engineering knowledge in designing, implementing, and managing Palo Alto firewalls, Prisma Access, GlobalProtect, and proxy solutions.
• Experience managing and maintaining a firewall inspection VPC in an AWS environment, including expertise in configuring and optimizing security groups, network access control lists (NACLs), route tables, and other relevant AWS networking components.
• In-depth knowledge of network security protocols, firewall technologies, and VPN solutions.
• Strong understanding of intrusion detection/prevention systems (IDS/IPS), malware analysis, and threat intelligence.
• Experience with security information and event management (SIEM) tools.
• Excellent problem-solving skills and the ability to work under pressure.
• Strong communication skills, both written and verbal, with the ability to convey complex technical information to non-technical stakeholders.
• Basic understanding of Terraform, Cloudformation, Ansible, REST API and similar DevOps coding and concepts.
• Familiar with SAFe Agile Framework and way of working.
• Experience with managing DNS, DHCP, IP Address Management and NTP solutions is seen as an advantage.