Network Security Engineer III
Job Summary
Job Description
We are seeking an experienced L3 Network Security Engineer to support a major firewall migration project. This role involves transitioning firewalls from Cisco ASA models to Cisco Firepower and Palo Alto Next-Gen Firewalls. Responsibilities include executing migration activities, validating configurations, and troubleshooting post-migration issues. The engineer will perform configuration conversion using various tools and manual methods, configure NAT policies, Site-to-Site and Client-to-Site VPNs, Firewall Policies, High Availability, SSL VPNs, and Next-Generation features like Intrusion Prevention/Detection Systems. Collaboration with technical leads and L4 engineers for complex migrations is expected, along with documenting configurations and migration steps.
Must have:
- Hands-on experience with Cisco ASA
- Hands-on experience with Cisco FTD/Firepower
- Hands-on experience with Palo Alto NGFW (1410, VM-Series, VSYS)
- Hands-on experience with Palo Alto NGFW Panorama, Expedition, Migration Manager
- Strong command of Cisco ASA ACL, VPN, AnyConnect, HA, NAT, Policy Management, OS Upgrade
- Strong command of Palo Alto VPN, Global Protect, HA, NAT, Policy Management, PANOS Upgrade
- Knowledge of routing protocols (Static, OSPF, BGP) and switching
- Experience in ASA to Palo Alto/Firepower config conversion
- Familiarity with tools like Expedition, Migration Manager
- Solid troubleshooting and packet capture analysis skills
Good to have:
- Cisco Certifications: CCNP Security / CCNP R&S
- Palo Alto Certifications: PCNSA/PCNSE
- Strong documentation abilities
- Excellent interpersonal and communication skills
- Flexible, proactive, and self-driven
2 skills required
Job Details
Job Title – Network Security Engineer III - IN
Location: Remote
Experience: 7–12 years
Project: Cisco ASA to Palo Alto / Firepower EOL Migration
Job Type: Full-time
Role Overview:
- We are looking for an experienced L3 Network Security Engineer to support a large-scale Firewall Migration Project, transitioning firewalls from Cisco ASA (5508,5525,5545,5555 etc.) to Cisco Firepower and Palo Alto Next-Gen Firewalls (including 1410 models, VSYS, and VM-Series). The candidate will work closely with technical leads to execute migration activities, validate configurations, and support post-migration troubleshooting.
Key Responsibilities:
- Participate in the migration and config conversion of:
- ASA → Palo Alto (1410 VSYS, 1410 Single Tenant & VM-Series)
- ASA → Cisco Firepower with ASA Code or FTD
- Perform configuration conversion using tools and manual methods.
- Configure and validate:
- NAT policies (Static, Dynamic)
- Site-to-Site VPNs and Client-to-Site VPNs (AnyConnect/Global Protect)
- Firewall Policies, HA, SSL VPNs, NextGen features (IPS/IDS)
- Strong knowledge of change/Incident management process.
- Conduct pre- and post-migration validation.
- Support change windows, participate in troubleshooting during cutovers.
- Document configurations and migration steps.
- Collaborate with L4 engineers and stakeholders during complex migrations.
Must-Have Skills:
- Hands-on experience with:
- Cisco ASA
- Cisco FTD/Firepower
- Palo Alto NGFW (including 1410, VM-Series, VSYS)
- Palo Alto NGFW (VSYS, Panorama, Expedition, Migration Manager)
- Strong command of:
- Cisco ASA- ACL, VPN setup (IPSec/SSL), AnyConnect, HA Setup,NAT, Policy Management, OS Upgrade.
- Palo Alto- VPN setup (IPSec/SSL), Global protect, HA Setup, NAT, Policy Management, PANOS Upgrade.
- Routing protocols (Static, OSPF, BGP) and switching fundamentals
- Experience in ASA to Palo Alto / Firepower config conversion.
- Familiarity with tools like Expedition, Migration Manager, or similar.
- Solid troubleshooting and packet capture analysis skills.
Soft Skills & Professional Attributes:
- Excellent interpersonal and communication skills – able to clearly articulate ideas, processes, and technical concepts to both technical and non-technical audiences.
- Strong documentation abilities – capable of creating and maintaining clear, concise technical documentation and procedures.
- Flexible, proactive, and self-driven – demonstrates initiative, reliability, and adaptability in dynamic environments.
Preferred Certifications:
- Cisco Certifications: CCNP Security / CCNP R&S
- Palo Alto Certifications: PCNSA/PCNSE
Similar Jobs
Rackspace Technology
Gurugram, Haryana, India (Remote)
• 3 Months ago
Epic Games
Porto Alegre, State Of Rio Grande Do Sul, Brazil (On-Site)
• 2 Months ago
Get notifed when new similar jobs are uploaded
Similar Skill Jobs
The Walt Disney Company
Hong Kong (On-Site)
• 7 Months ago
Qualcomm
Iași, Iași County, Romania (On-Site)
• 1 Month ago
endava
Cluj-Napoca, Cluj County, Romania (On-Site)
• 4 Weeks ago
Get notifed when new similar jobs are uploaded
Jobs in Gurugram, Haryana, India
Get notifed when new similar jobs are uploaded
Cyber Security Jobs
![Sourcegraph Inc - Security Engineer [IC3]](/_next/image?url=https%3A%2F%2Foutscal-lms-data.s3.ap-south-1.amazonaws.com%2Fcompany-image%2Fproduction%2Fsourcegraph%2Fsourcegraph_logo_10_16_2024__09_22_23.jpg&w=256&q=50){kind=logo}
bytedance
San Jose, California, United States (On-Site)
• 2 Months ago
NVIDIA
Santa Clara, California, United States (Hybrid)
• 2 Months ago
Apple
Seattle, Washington, United States (On-Site)
• 1 Month ago
Get notifed when new similar jobs are uploaded
