Network Security Engineer III - IN

Role Overview:

• We are looking for an experienced L3 Network Security Engineer to support a large-scale Firewall Migration Project, transitioning firewalls from Cisco ASA (5508,5525,5545,5555 etc.)  to Cisco Firepower and Palo Alto Next-Gen Firewalls (including 1410 models, VSYS, and VM-Series). The candidate will work closely with technical leads to execute migration activities, validate configurations, and support post-migration troubleshooting.

Key Responsibilities:

• Participate in the migration and config conversion of:
• ASA → Palo Alto (1410 VSYS, 1410 Single Tenant & VM-Series)
• ASA → Cisco Firepower with ASA Code or FTD
• Perform configuration conversion using tools and manual methods.
• Configure and validate:
• NAT policies (Static, Dynamic)
• Site-to-Site VPNs and Client-to-Site VPNs (AnyConnect/Global Protect)
• Firewall Policies, HA, SSL VPNs, NextGen features (IPS/IDS)
• Strong knowledge of change/Incident management process.
• Conduct pre- and post-migration validation.
• Support change windows, participate in troubleshooting during cutovers.
• Document configurations and migration steps.
• Collaborate with L4 engineers and stakeholders during complex migrations.

Must-Have Skills:

• Hands-on experience with:
• Cisco ASA
• Cisco FTD/Firepower
• Palo Alto NGFW (including 1410, VM-Series, VSYS)
• Palo Alto NGFW (VSYS, Panorama, Expedition, Migration Manager)
• Strong command of:
• Cisco ASA- ACL, VPN setup (IPSec/SSL), AnyConnect, HA Setup,NAT, Policy Management, OS Upgrade.
• Palo Alto- VPN setup (IPSec/SSL), Global protect, HA Setup, NAT, Policy Management, PANOS Upgrade.
• Routing protocols (Static, OSPF, BGP) and switching fundamentals
• Experience in ASA to Palo Alto / Firepower config conversion.
• Familiarity with tools like Expedition, Migration Manager, or similar.
• Solid troubleshooting and packet capture analysis skills.

Soft Skills & Professional Attributes:

• Excellent interpersonal and communication skills – able to clearly articulate ideas, processes, and technical concepts to both technical and non-technical audiences.
• Strong documentation abilities – capable of creating and maintaining clear, concise technical documentation and procedures.
• Flexible, proactive, and self-driven – demonstrates initiative, reliability, and adaptability in dynamic environments.

Preferred Certifications:

• Cisco Certifications: CCNP Security / CCNP R&S
• Palo Alto Certifications: PCNSA/PCNSE