Network Security (L3)

Responsibilities

• Manage day-to-day Operations according to customer environment
• Develop and implement network security architecture, policies, and procedures to protect against threats
• Provide L3 level support on critical/outage situations and drive end-to-end resolution
• Demonstrate good understanding of network protocols (HTTP, HTTPS, DNS, TCP/IP)
• Implement and maintain Checkpoint firewall and associated software modules (VPN, URL Filtering, IPS, etc.)
• Have strong working experience with Checkpoint VPN (S2S & Remote access)
• Deep understanding of Cloudflare CDN and security solutions, including WAF, bot management, DDoS protection
• Deep understanding of RADIUS, TACACS+, 802.1X, EAP methods, and networking protocols
• Install and configure ClearPass Policy Manager (CPPM), including profiling, onboarding, and guest services
• Resolve complex authentication failures, latency issues, and TACACS+ service issues
• Proficiency with Zscaler tools (ZIA, ZPA, ZDX), packet capture analysis, and scripting languages (Python, PowerShell) for automation
• Design, implement, and tune ZIA/ZPA policies for roaming, branch, and third-party users, utilizing Zscaler's cloud security concepts
• Resolve complex L2/L3 issues related to user connectivity, authentication (SAML, SCIM, Azure AD), and access flows
• Deep understanding of Zero Trust Network Access (ZTNA), Firewalls, and IPSec/SSL VPNs
• Create and maintain comprehensive documentation related to network security infrastructure and procedures following NIST and CIS standards
• Identify inefficiencies in operations and identify potential solutions to improve efficiency
• Own and drive improvements in Operations, technology, Advisory, and customer satisfaction
• Stay up to date on emerging security threats, technologies, and industry trends
• Manage and mentor a team of network security engineers and analysts
• Identify possible automation capabilities, execute within network security products and processes, and deliver across multiple customer environments
• Be cross-skilled across multiple technologies covering products like Firewalls, Web-Proxies, and cloud security products (AWS, Azure, GCP, etc.)
• Prepare weekly and monthly performance reports across multiple customer environments (people, technologies, process gaps, risk, RAG status, etc.)
• Conduct internal training to address skill gaps and motivate the team to pursue technical certifications

Requirements

• Minimum overall experience of 10-12 years
• Minimum of 8 years' experience in Information Security
• Minimum of 6 years' experience in running a Security Operations Center for a large organization
• Industry-recognized certifications such as CCSA/CCSE, CCIE, or equivalent is highly desirable

Qualifications

Preferably Graduate with Science/Engineering

Skills

Technical Skills

• Proficiency level understanding of the different security technologies
• Experience in deploying, configuring and troubleshooting of:
  • Security Change Management
  • Firewalls (Checkpoint)
  • NAC Aruba Clearpass
  • Web application Firewall Cloudflare
  • Web-Proxy - Zscaler (ZIA/ZPA/ZDX)
  • Email Security Abnormal AI
  • Load balancer F5 BIG-IP
• Experience in different Information Security Processes
• Rule Base Reviews & Optimization
• Security Incident Management (Standard & Critical)
• Understanding of different Security Architectures

Communication and Organizational Skills

• Good command of the English language, with excellent written and verbal skills
• Proactive in communication and appropriate selection of audience according to topic
• Highly organized and capable of tracking a variety of tasks to closure
• Good time management principles and effective in prioritizing workloads

Cultural Requirements

• Works collaboratively with other teams and builds positive working relationships
• Able to learn quickly and apply common sense to new situations, but understand when it is appropriate to engage others for advice
• Open and transparent style and approach when working with others
• Places a significant level of importance on personal & team development and understanding then improving upon weakness
• Accepting feedback from managers, peers, and clients regarding work performance
• Utilizes a goal-oriented approach, which drives self-improvement both personally and professionally and drives the teams
• Takes the initiative to work on tasks outside of his or her immediate scope of responsibility and encourages others to do so