Verified Job
Hardware / Network Engineer
Senior Network Firewall Engineer Jaipur (India)
Hardware / Network Engineer
#791249
Remote / WFH
Top India IT organization (Work from remote)
Job Description
L3 Senior Firewall Engineer Firewall, IDS/IPS & DDoS
The ideal candidate will be a highly experienced firewall and network security SME capable of owning complex enterprise security infrastructure end to end. The role demands robust technical depth, disciplined change execution, and the ability to support mission-critical services in a regulated, rapid-paced workplace.
Role Summary:
This role is responsible for designing, implementing, upgrading, and supporting enterprise network security controls across firewall, IDS/IPS, and DDoS protection platforms in complex production environments. The engineer will serve as an SME for physical and virtual security appliances and will own change execution, fault resolution, lifecycle replacements, and operational stability across hybrid and multi-site infrastructures.
A. Roles and Responsibilities
Lead end-to-end lifecycle management of enterprise firewall, IDS/IPS, and DDoS security platforms, including planning, deployment, upgrades, migration, validation, and decommissioning.
Perform hardware refresh and replacement of end-of-support and end-of-life security appliances with minimal business disruption and validated rollback readiness.
Analyze existing and target-state security architectures to ensure compatibility, performance, resilience, and compliance during upgrades and migrations.
Design, configure, and optimize firewall policies, NAT, routing, VPN, and security inspection rules in line with enterprise standards and least-privilege principles.
Support multi-context and clustered firewall environments, including high availability, failover, split-brain prevention, and state synchronization validation.
Plan and execute pre-change and post-change testing, including failover testing, traffic validation, security rule verification, and application reachability checks.
Troubleshoot complex incidents involving connectivity, asymmetric routing, policy conflicts, VPN failures, inspection drops, IPS triggers, and DDoS event
The ideal candidate will be a highly experienced firewall and network security SME capable of owning complex enterprise security infrastructure end to end. The role demands robust technical depth, disciplined change execution, and the ability to support mission-critical services in a regulated, rapid-paced workplace.
Role Summary:
This role is responsible for designing, implementing, upgrading, and supporting enterprise network security controls across firewall, IDS/IPS, and DDoS protection platforms in complex production environments. The engineer will serve as an SME for physical and virtual security appliances and will own change execution, fault resolution, lifecycle replacements, and operational stability across hybrid and multi-site infrastructures.
A. Roles and Responsibilities
Lead end-to-end lifecycle management of enterprise firewall, IDS/IPS, and DDoS security platforms, including planning, deployment, upgrades, migration, validation, and decommissioning.
Perform hardware refresh and replacement of end-of-support and end-of-life security appliances with minimal business disruption and validated rollback readiness.
Analyze existing and target-state security architectures to ensure compatibility, performance, resilience, and compliance during upgrades and migrations.
Design, configure, and optimize firewall policies, NAT, routing, VPN, and security inspection rules in line with enterprise standards and least-privilege principles.
Support multi-context and clustered firewall environments, including high availability, failover, split-brain prevention, and state synchronization validation.
Plan and execute pre-change and post-change testing, including failover testing, traffic validation, security rule verification, and application reachability checks.
Troubleshoot complex incidents involving connectivity, asymmetric routing, policy conflicts, VPN failures, inspection drops, IPS triggers, and DDoS event
