Lead Network Security Engineer

We are seeking a highly skilled L3 Network Security Engineer with extensive experience in Palo Alto and Fortinet security technologies , Fortinet SD-WAN , Panorama , Azure Cloud Network Security , and Data Center Migration initiatives. The role is responsible for designing, implementing, managing, and optimizing enterprise network security solutions while ensuring the availability, performance, and security of critical business infrastructure. The ideal candidate will play a key role in complex transformation projects, security operations, cloud networking, and large-scale migration activities. Roles & Responsibilities Network Security & Firewall Management Design, deploy, administer, and optimize Palo Alto and Fortinet firewall environments. Configure and manage security policies, NAT, VPNs, SSL Decryption, URL Filtering, IPS, Anti-Malware, and Application Control. Perform firewall rule reviews, policy optimization, software upgrades, and security patch management. Ensure firewall high availability, resilience, and compliance with security standards. Fortinet SD-WAN Administration Design, implement, and maintain Fortinet SD-WAN solutions across enterprise environments. Configure Overlay VPN, ADVPN, SLA-based routing, Performance SLAs, and dynamic routing protocols. Troubleshoot complex SD-WAN connectivity, routing, and application performance issues. Support Hub-and-Spoke and Multi-Hub SD-WAN architectures. Palo Alto Panorama Management Administer Panorama for centralized firewall policy management and governance. Manage device groups, templates, template stacks, and software lifecycle activities. Implement centralized logging, monitoring, reporting, and compliance controls. Maintain backup, recovery, and disaster recovery processes. Cloud Network Security Design and support Microsoft Azure network security solutions. Configure and manage Azure Virtual WAN, VNets, NSGs, UDRs, VPN Gateways, NVAs, and Azure Firewall. Support hybrid cloud connectivity and cloud security architecture implementations. Troubleshoot cloud networking and security-related issues. Data Center Migration & Transformation Lead network and security activities during data center migration projects. Execute firewall and policy migrations while minimizing operational risks. Coordinate application cutovers, validation testing, rollback planning, and post-migration support. Ensure seamless connectivity and service continuity throughout migration activities. Routing & Network Infrastructure Configure and troubleshoot routing protocols including BGP, OSPF, Static Routing, VRF, ECMP , and Policy-Based Routing. Analyze routing behavior, failover mechanisms, and network convergence scenarios. Support enterprise routing and switching environments. Security Operations & Incident Management Provide L3 support for critical network security incidents and outages. Perform Root Cause Analysis (RCA) and implement preventive measures. Collaborate with vendors including Palo Alto, Fortinet, and Microsoft for issue resolution. Drive security hardening initiatives and implement industry best practices. Change & Project Management Develop implementation, test, validation, and rollback plans for network security changes. Participate in CAB meetings and lead infrastructure upgrades, migration, and transformation projects. Execute planned changes during maintenance windows with minimal business impact. Documentation & Knowledge Management Develop and maintain technical documentation, including: High-Level and Low-Level Designs (HLD/LLD) Standard Operating Procedures (SOPs) Runbooks Knowledge Base Articles Network Diagrams As-Built Documentation Provide technical mentoring and guidance to L1/L2 engineers. Required Technical Skills Firewall Technologies: Palo Alto, Panorama, FortiGate, FortiManager, FortiAnalyzer Fortinet Security: SD-WAN, ADVPN, IPsec VPN, SSL VPN, HA, VDOM Cloud Security: Microsoft Azure, Azure Firewall, Azure