Senior Specialist-Network & Security

Design, implement, and maintain LAN/WAN connectivity across corporate and branch locations. Manage MPLS, SD-WAN, VPN tunnels, and internet failover strategies.2. Security Architecture & Zero Trust EnforcementManage and administer next-generation firewalls, including FortiGate and Forcepoint NGFWs, ensuring optimal performance and high availability. Design, implement, and maintain Fortinet SASE solutions, enforcing Zero Trust Network Access (ZTNA) policies to secure remote user traffic with granular control. Act as the primary technical owner for all firewall and security policy changes.Oversee the security posture of the data center network, specifically managing and maintaining the Cisco ACI environment. Define, audit, and enforce ACI Contracts to ensure strict micro segmentation and control East-West communication between application segments, adhering to the Principle of Least Privilege.4. Advanced Network Optimization & SD-WANLead the configuration and optimization of FortiGate SD-WAN features to intelligently steer traffic based on link performance, quality metrics (jitter, latency, loss), and application requirements. Manage and troubleshoot complex routing protocols (OSPF, EIGRP) and Layer 2 infrastructure (MST, VLANs, STP) across core and distribution layers.Serve as the L3 escalation point for all critical security and network faults, including complex VPN failures (IPsec/SSL), policy conflicts, and performance degradations. Utilize monitoring and SIEM tools (FortiAnalyzer, FortiMonitor) for rapid root‑cause analysis and timely resolution to meet stringent MTTR SLAs.Ensure configuration consistency across the multi‑vendor environment, utilizing central management platforms like FortiManager and Aruba Central for seamless policy deployment across firewalls, FortiSwitches, and Aruba Switches/APs. Maintain and audit all access lists and security policies to comply with internal and external regulatory standards.7. Projects & Security Tool DeploymentLead technical infrastructure projects related to network security, including firewall migrations, major OS upgrades, and the deployment of new security tools (e.g., EDR/SOAR integrations). Coordinate cross‑functional teams and external vendors to ensure project delivery meets security, budget, and timeline objectives.8. Proactive Risk Mitigation & Vulnerability ManagementPerform regular security audits and vulnerability assessments on network and security devices. Implement configuration hardening guides and lead the timely patching/remediation of critical vulnerabilities to reduce the overall network attack surface.9. Documentation & Operational ExcellenceCreate and maintain high‑quality documentation for security architectures, L3 troubleshooting guides, standard operating procedures (SOPs), and incident response playbooks. Drive operational excellence by tracking key performance indicators (KPIs) and recommending process improvements.10. Disaster Recovery & Business ContinuityDevelop and test DR strategies for network infrastructure to meet defined RTO/RPO objectives.11. Compliance & Security AuditsEnsure adherence to ISO 27001, PCI‑DSS, and internal security policies. Support vulnerability assessments and penetration testing remediation.12. Load Balancer & WAF AdministrationConfigure and maintain load balancers (Array,F5, Citrix) and WAF solutions for application security and performance optimization.13. ProjectsExecute network upgrade projects, new site connectivity, and security tool deployments.Desired Candidate ProfileEducation: Bachelor’s degree in IT, Computer Science, or related field.Experience: 9+ years in network and security operations, with hands‑on experience in datacentre switching, firewalls, load balancers, SSL VPN, and WAF.Technical Skills: Firewall policy management, SSL VPN configuration, load balancer and WAF administration, cloud security, patch and vulnerability management.Certifications (Preferred): CCNA/CCNP, Fortinet NSE, ITIL.Soft Skills: Problem‑solving, communication, adherence to processes.Key Competencies and SkillsStrong technical knowledge of datacentre network and security componentsAbility to manage firewall, WAF, SSL VPN, and cloud securityExperience in patching and vulnerability remediationStrong Incident response and troubleshooting skillsDocumentation and compliance supportTeam collaboration and process adherenceStrong analytical, troubleshooting, and communication skillsPerformance Metrics / KPIsAsset UptimeIncident ResolutionPatch ComplianceChange ManagementPolicy Accuracy and Incident free operations#J-18808-Ljbffr