[Hiring] Network Security Engineer @Zensar

Role Description

• Firewall Administration & Architecture
  • Deployment & Config:
    • Install, configure, and maintain Palo Alto (PA-Series) and Fortinet (FortiGate) firewalls.
  • Policy Management:
    • Design and audit firewall rule bases, security profiles, and NAT policies.
  • Centralised Management:
    • Manage large-scale environments using Palo Alto Panorama and Fortinet FortiManager / FortiAnalyzer.
  • VPN Management:
    • Establish and secure Site-to-Site IPsec VPNs and Remote Access VPNs (GlobalProtect, FortiClient).
• Network Security Operations
  • Threat Mitigation:
    • Configure advanced security features including IPS/IDS, URL filtering, Anti-.
  • Upgrade & Patching:
    • Perform routine firmware upgrades, hotfixes, and vulnerability patching.
  • Monitoring:
    • Analyze security logs to detect anomalies, unauthorized access, or potential network breaches.
  • High Availability:
    • Maintain redundant firewall clusters (HA Active/Passive and Active/Active topologies).
• Traffic Management & Core Network Services (DDI)
  • Application Delivery:
    • Configure F5 BIG-IP LTM (Local Traffic Manager), including VIPs, Pools, Monitors, SSL offloading, and advanced iRules.
  • IPAM & DDI:
    • Manage Infoblox Grid Manager to run high-availability DNS, DHCP, and IP Address Management (IPAM).
  • Network Automation:
    • Maintain network health by automating IP allocations and DNS entries.
• Edge Architecture & WAN Edge
  • SD-WAN Fabric:
    • Design, deploy, and optimize SD-WAN solutions (Fortinet Secure SD-WAN or Palo Alto Prisma SD-WAN) to replace traditional MPLS.
  • Traffic Steering:
    • Define application-aware routing paths to guarantee performance for critical SaaS and cloud workloads.
  • Hybrid Connectivity:
    • Maintain secure Site-to-Site IPsec VPN overlays across the SD-WAN fabric.
• Troubleshooting & Support
  • Incident Response:
    • Act as a Tier 2/3 escalation point for complex network security issues and outages.
  • Packet Analysis:
    • Use tools like Wireshark and built-in CLI packet captures to diagnose complex routing or traffic drops.
  • Performance Tuning:
    • Monitor firewall CPU, memory, and session counts to optimize throughput.
• Troubleshooting & Architecture
  • Tier 3 Escalation:
    • Diagnose complex outages involving multi-vendor paths (e.g., F5 VIP to Firewall to SD-WAN edge).
  • Packet Diagnostics:
    • Master packet capture tools (Wireshark, tcpdump) to resolve deep-layer routing, translation, or load-balancing issues.

Qualifications

• Firewall Administration & Architecture
  • Deployment & Config:
    • Install, configure, and maintain Palo Alto (PA-Series) and Fortinet (FortiGate) firewalls.
  • Policy Management:
    • Design and audit firewall rule bases, security profiles, and NAT policies.
  • Centralised Management:
    • Manage large-scale environments using Palo Alto Panorama and Fortinet FortiManager / FortiAnalyzer.
  • VPN Management:
    • Establish and secure Site-to-Site IPsec VPNs and Remote Access VPNs (GlobalProtect, FortiClient).
• Network Security Operations
  • Threat Mitigation:
    • Configure advanced security features including IPS/IDS, URL filtering, Anti-.
  • Upgrade & Patching:
    • Perform routine firmware upgrades, hotfixes, and vulnerability patching.
  • Monitoring:
    • Analyze security logs to detect anomalies, unauthorized access, or potential network breaches.
  • High Availability:
    • Maintain redundant firewall clusters (HA Active/Passive and Active/Active topologies).
• Traffic Management & Core Network Services (DDI)
  • Application Delivery:
    • Configure F5 BIG-IP LTM (Local Traffic Manager), including VIPs, Pools, Monitors, SSL offloading, and advanced iRules.
  • IPAM & DDI:
    • Manage Infoblox Grid Manager to run high-availability DNS, DHCP, and IP Address Management (IPAM).
  • Network Automation:
    • Maintain network health by automating IP allocations and DNS entries.
• Edge Architecture & WAN Edge
  • SD-WAN Fabric:
    • Design, deploy, and optimize SD-WAN solutions (Fortinet Secure SD-WAN or Palo Alto Prisma SD-WAN) to replace traditional MPLS.
  • Traffic Steering:
    • Define application-aware routing paths to guarantee performance for critical SaaS and cloud workloads.
  • Hybrid Connectivity:
    • Maintain secure Site-to-Site IPsec VPN overlays across the SD-WAN fabric.
• Troubleshooting & Support
  • Incident Response:
    • Act as a Tier 2/3 escalation point for complex network security issues and outages.
  • Packet Analysis:
    • Use tools like Wireshark and built-in CLI packet captures to diagnose complex routing or traffic drops.
  • Performance Tuning:
    • Monitor firewall CPU, memory, and session counts to optimize throughput.
• Troubleshooting & Architecture
  • Tier 3 Escalation:
    • Diagnose complex outages involving multi-vendor paths (e.g., F5 VIP to Firewall to SD-WAN edge).
  • Packet Diagnostics:
    • Master packet capture tools (Wireshark, tcpdump) to resolve deep-layer routing, translation, or load-balancing issues.

Benefits

• Experience-led everything.
• Commitment to shaping experiences for better futures.
• Inclusive workplace culture.
• Equal employment opportunity (EEO) and affirmative action employer.

Company Description

At Zensar, we’re committed to conceptualizing, designing, engineering, marketing, and managing digital solutions and experiences for over 130 leading enterprises. We are a company driven by a bold purpose: Together, we shape experiences for better futures. Whether for our clients, our people, or the world around us, this belief powers everything we do.

• Part of the $4.8 billion RPG Group.
• A community of 10,000+ innovators across 30+ global locations.
• Explore Life at Zensar and join us to Grow. Own. Achieve. Learn.
• Prioritizing well-being and celebrating individuality.