Job Detail

Job Description

Network Security Skills

·Good understanding of network security architecture in enterprise network environments (Zero trust networks)

·Good understanding of Application layer protocols

·Good understanding of TCP/IP protocol and its troubleshooting from a network security perspective

·Good understanding of DDOS attacks and awareness of DDOS mitigation controls and tools

·Good understanding of IPS solutions, mainly Cisco source fire, Checkpoint IPS

NGT Firewalls 

·Must have Good knowledge and experience of Palo Alto, Checkpoint 

·Good knowledge and understanding of Palo Alto Panorama

·Good knowledge and understanding of Checkpoint security management appliances

·Optional: knowledge and experience of open-source firewalls such as OPNsense, PFsense

·Good understanding and experience of managing multi-factor authentication 

·Good knowledge and experience of firewall management tools (Algosec, Tufin )

·Good knowledge or experience of firewall rules review / remediation-based projects

·Understanding of automation in general, any experience or involvement regarding firewall policy change automation will be advantageous

WAF - Web application Firewalls

·Good understanding of 3 tier application models

·Good understanding of HTTP and other web-based protocols

·Knowledge and experience of implementing Big-IP ASM WAF feature for financial organizations

·Optional: awareness and knowledge of other cloud based or on-premises WAF solutions

Web Proxy 

·Knowledge and experience of managing Bluecoat web proxy, DLP , web isolation, AV or any other security controls

·Good to have knowledge and experience of Zscaler web proxy solution

Automation

·Knowledge and understanding of DevOPS/automation concepts (CI/CD, pipelines)

·Ansible experience and good understanding

·API exposure and understanding

Networking Skills (Routing/Switching)

·Good high-level understanding of network architectural designs (legacy 3-tiered model vs leaf/spine)

·Good understanding of OSPF / BGP routing protocols

·Load balancers skills (Big-IP F5 knowledge/experience or any other opensource load balancers (Haproxy, traefik etc.)

·Good understanding of CDN based service delivery using Akamai or Cloudflare 

Governance

·Good understanding and experience of change management within a major global Financial Organization 

·Good understanding and experience of ITIL framework relevant to incidents and problem management

Management / Monitoring

·Good understanding of industry best practices to plan and configure baseline configurations for network security devices

·Good understanding of device monitoring via SNMP/ICMP using Solarwinds, NAGIOS, Icinga or other similar NMS tool