Network Security Engineer

Network Security Engineer We are seeking an experienced Network Security / Firewall Engineer to design, implement, operate, and troubleshoot enterprise network security infrastructure. The ideal candidate will have strong hands-on experience with Cisco Firepower Threat Defense (FTD/FMC) or comparable next-generation firewall platforms, along with solid knowledge of enterprise routing, VPN technologies, network segmentation, cloud networking, and security best practices. This is a hands-on engineering role requiring strong troubleshooting skills and the ability to work across network, security, cloud, application, and infrastructure teams. Key Responsibilities

• Configure, manage, maintain, and troubleshoot enterprise next-generation firewall environments.
• Administer Cisco FTD firewalls using Firepower Management Center (FMC).
• Create and maintain firewall access-control policies, network/service objects, security zones, and NAT policies.
• Design, configure, and troubleshoot site-to-site IPsec VPNs and remote-access VPN solutions.
• Troubleshoot complex application connectivity issues across firewalls and network infrastructure.
• Perform packet-level troubleshooting using packet captures, Wireshark, firewall connection/session tables, logs, and platform-specific diagnostic tools.
• Configure and troubleshoot NAT/PAT, static NAT, source NAT, destination NAT, and NAT exemptions.
• Support firewall high-availability architectures and perform failover testing.
• Participate in firewall upgrades, migrations, hardware refreshes, and lifecycle-management activities.
• Review firewall policies and identify obsolete, redundant, overly permissive, or unused rules and objects.
• Support network segmentation and security-zone architecture.
• Configure and troubleshoot web/URL filtering, IPS/IDS, application control, malware protection, and other NGFW security capabilities.
• Support security infrastructure across on-premises data centers, branch locations, Internet edge, and cloud environments.
• Participate in incident response and root-cause analysis for network and security incidents.
• Create and maintain network diagrams, firewall documentation, operational procedures, implementation plans, and troubleshooting runbooks.
• Participate in change-management processes, including planning, peer review, implementation, validation, and rollback procedures.

Salary Range- $85,000-$100,000 a year

#LI-SP3

#LI-VX1 Tata Consultancy Services