Network Security Engineer III - IN

Role Overview:

• We are looking for an experienced L3 Network Security Engineer to support a large-scale Firewall Migration Project, transitioning firewalls from Cisco ASA (5508,5525,5545,5555 etc.) to Cisco Firepower and Palo Alto Next-Gen Firewalls (including 1410 models, VSYS, and VM-Series). The candidate will work closely with technical leads to execute migration activities, validate configurations, and support post-migration troubleshooting.

Key Responsibilities:

• Participate in the migration and config conversion of:
• ASA → Palo Alto (1410 VSYS, 1410 Single Tenant & VM-Series)
• ASA → Cisco Firepower with ASA Code or FTD
• Perform configuration conversion using tools and manual methods.
• Configure and validate:
• NAT policies (Static, Dynamic)
• Site-to-Site VPNs and Client-to-Site VPNs (AnyConnect/Global Protect)
• Firewall Policies, HA, SSL VPNs, NextGen features (IPS/IDS)
• Strong knowledge of change/Incident management process.
• Conduct pre- and post-migration validation.
• Support change windows, participate in troubleshooting during cutovers.
• Document configurations and migration steps.
• Collaborate with L4 engineers and stakeholders during complex migrations.

Must-Have Skills:

• Hands-on experience with:
• Cisco ASA
• Cisco FTD/Firepower
• Palo Alto NGFW (including 1410, VM-Series, VSYS)
• Palo Alto NGFW (VSYS, Panorama, Expedition, Migration Manager)
• Strong command of:
• Cisco ASA- ACL, VPN setup (IPSec/SSL), AnyConnect, HA Setup,NAT, Policy Management, OS Upgrade.
• Palo Alto- VPN setup (IPSec/SSL), Global protect, HA Setup, NAT, Policy Management, PANOS Upgrade.
• Routing protocols (Static, OSPF, BGP) and switching fundamentals
• Experience in ASA to Palo Alto / Firepower config conversion.
• Familiarity with tools like Expedition, Migration Manager, or similar.
• Solid troubleshooting and packet capture analysis skills.

Soft Skills & Professional Attributes:

• Excellent interpersonal and communication skills – able to clearly articulate ideas, processes, and technical concepts to both technical and non-technical audiences.
• Strong documentation abilities – capable of creating and maintaining clear, concise technical documentation and procedures.
• Flexible, proactive, and self-driven – demonstrates initiative, reliability, and adaptability in dynamic environments.

Preferred Certifications:

• Cisco Certifications: CCNP Security / CCNP R&S
• Palo Alto Certifications: PCNSA/PCNSE

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.