Administrator - Fortinet, Palo Alto Firewall

Job Summary

Job Summary : Job Description – L3+ Network Security Expert (10+ Years)\\r\\nExpertise: Firewalls, Cisco ISE, Security Services Edge (SSE), Zero Trust Network Access (ZTNA)\\r\\nPosition Overview\\r\\nWe are seeking a highly experienced L3+ Network Security Expert with 10+ years of hands-on experience in securing large enterprise networks.\\r\\nThe ideal candidate should have deep expertise in Firewall technologies, Cisco ISE (NAC & identity enforcement), Security Services Edge (SSE), and ZTNA, along with strong architecture, troubleshooting, and operational leadership capabilities.\\r\\nThis is a senior technical role responsible for designing, optimizing, and supporting mission critical security infrastructure.\\r\\n

Key Responsibilities

Job Responsibilities : 1. Firewall Engineering & Security Operations\\r\\n• Design, deploy, and manage enterprise firewalls (Fortinet, Palo Alto, Cisco ASA/FTD, Checkpoint, etc.).\\r\\n• Perform advanced troubleshooting of L3/L4/L7 security policies, VPNs, NAT, SSL decryption, and threat-prevention modules.\\r\\n• Conduct firewall audits, rule rationalization, configuration hardening, and lifecycle maintenance.\\r\\n• Lead major change activities, firewall upgrades, HA failover testing, and security posture improvements.\\r\\n2. Cisco ISE – Identity & Access Control\\r\\n• Architect and manage Cisco ISE deployments supporting 802.1X, MAB, posture checks, profiling, guest access, and segmentation.\\r\\n• Integrate ISE with network infrastructure, AD/IDM, SIEM, and SSE/ZTNA ecosystems for unified identity-based security.\\r\\n• Create, optimize, and troubleshoot policy sets, authorization rules, and certificate-based authentications.\\r\\n• Provide L3 escalations for NAC-related access issues across wired, wireless, and VPN environments.\\r\\n3. Security Services Edge (SSE)\\r\\n• Support design, rollout, and optimization of SSE platforms such as Cato SSE, Prisma Access, etc.\\r\\n• Manage SWG, DLP, cloud firewall, and secure remote access functions within SSE frameworks.\\r\\n• Perform traffic steering, PAC file/agent deployment, and application-layer troubleshooting for cloud security policies.\\r\\n \\r\\n4. Zero Trust Network Access (ZTNA)\\r\\n• Architect and implement ZTNA solutions using identity-driven access and continuous trust evaluation.\\r\\n• Migrate legacy VPN access to Zero Trust-based secure application access.\\r\\n• Onboard applications, connectors, and user groups into ZTNA platforms (Cato ZTNA, Fortinet ZTNA, etc.).\\r\\n• Troubleshoot user access experience, policy mismatches, and connector/edge failures.\\r\\n5. Security Architecture & Governance\\r\\n• Contribute to enterprise security architecture, segmentation design, and secure network frameworks.\\r\\n• Map business requirements to security controls, policies, and Zero Trust principles.\\r\\n• Collaborate with SOC, Cloud, IAM, and Network architecture teams to strengthen security posture.\\r\\n• Conduct risk assessments, gap analysis, and propose mitigation strategies.\\r\\n6. Operational Leadership & Documentation\\r\\n• Act as highest-level escalation (L3/L4) for complex network-security issues.\\r\\n• Mentor L1/L2 engineers; conduct knowledge transfer sessions.\\r\\n• Maintain detailed documentation including architecture diagrams, SOPs, runbooks, and change procedures.\\r\\n• Participate in DR planning, compliance reviews, and security audits.\\r\\n

Skill Requirements

Firewalls: Fortinet, Cisco ASA/FTD\\r\\n• Cisco ISE: 802.1X, posture, profiling, guest/BYOD, pxGrid, segmentation\\r\\n• SSE: Prisma Access / Cato SSE\\r\\n• ZTNA: Cato ZTNA, Fortinet ZTNA, or equivalent\\r\\n• Networking: BGP, OSPF, EIGRP, VLANs, STP, HSRP/VRRP\\r\\n• Strong understanding of PKI, SSL/TLS, MFA, SAML/OAuth, identity-based policy control\\r\\n• Hands-on experience with SIEM tools, packet capture, and log analysis\\r\\n

Other Requirements

Strong analytical, troubleshooting, and problem solving skills\\r\\n• Excellent communication and stakeholder management\\r\\n• Ability to work under pressure in a 24×7 enterprise environment\\r\\n• Ownership-driven mindset with focus on service reliability and security maturity\\r\\n