[Hiring] Security Network Engineer @NTT DATA, Europe & LATAM, Branch in USA, Inc.

Role Description

NTT DATA is seeking a highly skilled Senior Network Security Engineer to help secure, optimize, and transform an enterprise network environment. This role will lead a key migration from Check Point to Fortinet firewalls while maintaining secure, reliable connectivity across corporate, cloud, branch, and remote environments. The engineer will also support and enhance SD-WAN, routing, cloud security, DDoS protection, and network automation capabilities.

• Lead the migration from Check Point to Fortinet, including policy conversion, rule optimization, testing, and traffic validation.
• Manage and maintain Cisco ASA, Palo Alto, Fortinet FortiGate, and Check Point firewalls across corporate, cloud, and remote sites.
• Design and optimize firewall rule sets to improve security, performance, and compliance.
• Perform network security risk assessments, firewall audits, and configuration reviews.
• Manage and optimize SD-WAN architecture to improve application performance, resilience, and latency.
• Implement policy-based traffic steering, failover mechanisms, and WAN optimization.
• Integrate SD-WAN with firewalls, cloud security solutions, branch locations, and on-premises networks.
• Troubleshoot SD-WAN performance issues, routing conflicts, and connectivity problems.
• Design and implement static NAT, dynamic NAT, and Port Address Translation (PAT) policies.
• Configure and troubleshoot EIGRP, BGP, and OSPF for enterprise and cloud routing.
• Optimize routing policies for high availability, redundancy, and performance.
• Administer and optimize Zscaler ZIA and ZPA for secure cloud access and web filtering.
• Implement zero-trust security policies for cloud applications and remote users.
• Troubleshoot Zscaler tunnels, proxy configurations, and application access issues.
• Implement and maintain Radware DDoS protection against volumetric and application-layer attacks.
• Configure IPS and IDS solutions to detect and mitigate security threats.
• Partner with SOC teams to analyze and respond to security incidents.
• Lead troubleshooting for firewall, SD-WAN, NAT, and routing issues affecting business-critical applications.
• Use packet captures and security logs to diagnose complex network problems.
• Coordinate with Cisco, Fortinet, Palo Alto, and Zscaler support teams to resolve complex technical issues.
• Develop and enforce network security policies aligned with NIST, CIS Benchmarks, and ISO 27001.
• Maintain current documentation for firewall rules, SD-WAN policies, routing, and security configurations.
• Develop Python, Bash, or PowerShell scripts to automate firewall audits and SD-WAN policy updates.
• Implement network automation frameworks to streamline security operations and improve efficiency.

Qualifications

• 5 to 8 years of experience in network security engineering.
• Expertise with Fortinet FortiGate, Check Point, Palo Alto, and Cisco ASA firewalls.
• Strong knowledge of SD-WAN solutions, including Fortinet SD-WAN, Cisco SD-WAN, and Prisma Access.
• Experience configuring and troubleshooting EIGRP, BGP, and OSPF routing protocols.
• Hands-on experience managing Zscaler ZIA and ZPA cloud security solutions.
• Proficiency with VPN technologies, including IPsec, SSL, GRE, DMVPN, and L2TP, and an understanding of their security implications.
• Strong skills in NAT, firewall rule optimization, and routing table analysis.
• Experience with Radware DDoS protection, IPS/IDS, and threat mitigation.
• Knowledge of zero-trust security architectures and secure SD-WAN implementation.
• Strong analytical and troubleshooting skills using packet captures, firewall logs, and security telemetry.
• Familiarity with ticketing tools.
• Good communication and interpersonal skills, a proactive attitude, and the ability to work effectively as part of a team.

Requirements

• Experience leading enterprise firewall migration projects, particularly from Check Point to Fortinet.
• Experience working in complex enterprise environments that connect on-premises, branch, remote-user, and cloud networks.
• Network security automation experience using Python, Bash, or PowerShell.

Tools & Technologies

• Fortinet FortiGate and Fortinet SD-WAN; Check Point; Palo Alto and Prisma Access; Cisco ASA and Cisco SD-WAN.
• Zscaler ZIA/ZPA; Radware DDoS protection; IPS/IDS technologies.
• EIGRP, BGP, OSPF, NAT, PAT, IPsec, SSL, GRE, DMVPN, and L2TP.
• Python, Bash, PowerShell, packet-capture tools, security logs, and ticketing platforms.
• NIST, CIS Benchmarks, and ISO 27001 security frameworks and standards.

Education & Certifications

• Preferred certifications include Fortinet NSE 4 or NSE 7, Check Point CCSA or CCSE, Palo Alto PCNSA or PCNSE, Cisco CCNP Security, Zscaler ZCCP, and relevant SD-WAN certifications.

Required Equipment

• This role requires the use of a personal laptop. Candidates must be comfortable with company security software and device management tools being installed on their laptop as part of the onboarding process and for the duration of the engagement.