Network Security Engineer III
Job Summary
Job Description
We are seeking an experienced L3 Network Security Engineer to support a major firewall migration project. This role involves transitioning firewalls from Cisco ASA models to Cisco Firepower and Palo Alto Next-Gen Firewalls. Responsibilities include executing migration activities, validating configurations, and troubleshooting post-migration issues. The engineer will perform configuration conversion using various tools and manual methods, configure NAT policies, Site-to-Site and Client-to-Site VPNs, Firewall Policies, High Availability, SSL VPNs, and Next-Generation features like Intrusion Prevention/Detection Systems. Collaboration with technical leads and L4 engineers for complex migrations is expected, along with documenting configurations and migration steps.
Must have:
- Hands-on experience with Cisco ASA
- Hands-on experience with Cisco FTD/Firepower
- Hands-on experience with Palo Alto NGFW (1410, VM-Series, VSYS)
- Hands-on experience with Palo Alto NGFW Panorama, Expedition, Migration Manager
- Strong command of Cisco ASA ACL, VPN, AnyConnect, HA, NAT, Policy Management, OS Upgrade
- Strong command of Palo Alto VPN, Global Protect, HA, NAT, Policy Management, PANOS Upgrade
- Knowledge of routing protocols (Static, OSPF, BGP) and switching
- Experience in ASA to Palo Alto/Firepower config conversion
- Familiarity with tools like Expedition, Migration Manager
- Solid troubleshooting and packet capture analysis skills
Good to have:
- Cisco Certifications: CCNP Security / CCNP R&S
- Palo Alto Certifications: PCNSA/PCNSE
- Strong documentation abilities
- Excellent interpersonal and communication skills
- Flexible, proactive, and self-driven
2 skills required
Job Details
Job Title – Network Security Engineer III - IN
Location: Remote
Experience: 7–12 years
Project: Cisco ASA to Palo Alto / Firepower EOL Migration
Job Type: Full-time
Role Overview:
- We are looking for an experienced L3 Network Security Engineer to support a large-scale Firewall Migration Project, transitioning firewalls from Cisco ASA (5508,5525,5545,5555 etc.) to Cisco Firepower and Palo Alto Next-Gen Firewalls (including 1410 models, VSYS, and VM-Series). The candidate will work closely with technical leads to execute migration activities, validate configurations, and support post-migration troubleshooting.
Key Responsibilities:
- Participate in the migration and config conversion of:
- ASA → Palo Alto (1410 VSYS, 1410 Single Tenant & VM-Series)
- ASA → Cisco Firepower with ASA Code or FTD
- Perform configuration conversion using tools and manual methods.
- Configure and validate:
- NAT policies (Static, Dynamic)
- Site-to-Site VPNs and Client-to-Site VPNs (AnyConnect/Global Protect)
- Firewall Policies, HA, SSL VPNs, NextGen features (IPS/IDS)
- Strong knowledge of change/Incident management process.
- Conduct pre- and post-migration validation.
- Support change windows, participate in troubleshooting during cutovers.
- Document configurations and migration steps.
- Collaborate with L4 engineers and stakeholders during complex migrations.
Must-Have Skills:
- Hands-on experience with:
- Cisco ASA
- Cisco FTD/Firepower
- Palo Alto NGFW (including 1410, VM-Series, VSYS)
- Palo Alto NGFW (VSYS, Panorama, Expedition, Migration Manager)
- Strong command of:
- Cisco ASA- ACL, VPN setup (IPSec/SSL), AnyConnect, HA Setup,NAT, Policy Management, OS Upgrade.
- Palo Alto- VPN setup (IPSec/SSL), Global protect, HA Setup, NAT, Policy Management, PANOS Upgrade.
- Routing protocols (Static, OSPF, BGP) and switching fundamentals
- Experience in ASA to Palo Alto / Firepower config conversion.
- Familiarity with tools like Expedition, Migration Manager, or similar.
- Solid troubleshooting and packet capture analysis skills.
Soft Skills & Professional Attributes:
- Excellent interpersonal and communication skills – able to clearly articulate ideas, processes, and technical concepts to both technical and non-technical audiences.
- Strong documentation abilities – capable of creating and maintaining clear, concise technical documentation and procedures.
- Flexible, proactive, and self-driven – demonstrates initiative, reliability, and adaptability in dynamic environments.
Preferred Certifications:
- Cisco Certifications: CCNP Security / CCNP R&S
- Palo Alto Certifications: PCNSA/PCNSE
Similar Jobs
Looks like we're out of matches
Set up an alert and we'll send you similar jobs the moment they appear!
Similar Skill Jobs
Looks like we're out of matches
Set up an alert and we'll send you similar jobs the moment they appear!
Jobs in Gurugram, Haryana, India
Looks like we're out of matches
Set up an alert and we'll send you similar jobs the moment they appear!
Cyber Security Jobs
Looks like we're out of matches
Set up an alert and we'll send you similar jobs the moment they appear!
