Note: The job is a remote job and is open to candidates in USA. Diverse Lynx is seeking an experienced Network Security Engineer to support and manage enterprise security infrastructure within a shared services environment. The role involves handling Level 2 operational activities across various network security technologies and ensuring adherence to ITIL processes and service-level agreements.
Responsibilities
- Manage, monitor, and troubleshoot network security technologies including Firewalls, Proxy Solutions, IDS/IPS, VPN, WAF, DDoS Protection, and NAC platforms
- Perform L2 operational support, incident resolution, and root cause analysis for infrastructure security issues
- Act as the primary escalation point for Firewall, Proxy, VPN, WAF, and DDoS-related incidents raised by internal teams and customers
- Provide technical guidance and support to team members on network and security-related issues
- Review, prioritize, assign, and track tickets to ensure timely resolution within defined SLAs
- Prepare and analyze weekly and monthly security operational metrics and reports
- Participate in incident, problem, and change management activities in accordance with ITIL best practices
- Support secure network design and implementation initiatives, including network segmentation and Zero Trust architectures
- Collaborate with cross-functional teams to ensure the availability, performance, and security of enterprise network infrastructure
- Maintain operational documentation, standard operating procedures (SOPs), and knowledge base articles
- Participate in 24x7 shift operations and on-call support when required
Skills
- Strong hands-on experience managing and troubleshooting: Firewalls: Palo Alto, Cisco, Fortinet, Check Point
- Strong hands-on experience managing and troubleshooting: IDS/IPS Solutions
- Strong hands-on experience managing and troubleshooting: VPN Technologies (IPSec, SSL VPN)
- Strong hands-on experience managing and troubleshooting: Web Application Firewalls (WAF)
- Strong hands-on experience managing and troubleshooting: DDoS Protection Solutions
- Strong hands-on experience managing and troubleshooting: Network Access Control (NAC)
- Deep understanding of networking protocols and technologies: TCP/IP
- Deep understanding of networking protocols and technologies: DNS
- Deep understanding of networking protocols and technologies: BGP
- Deep understanding of networking protocols and technologies: OSPF
- Deep understanding of networking protocols and technologies: VLANs
- Deep understanding of networking protocols and technologies: Switching Concepts
- Deep understanding of networking protocols and technologies: Routing Fundamentals
- Strong knowledge of secure network architecture principles including: Network Segmentation
- Strong knowledge of secure network architecture principles including: Zero Trust Security Models
- Excellent understanding of ACLs, security policies, and firewall rule management
- Strong knowledge of IPSec tunneling, GRE, HTTP/HTTPS, and DNS protocols
- Good understanding of: Zscaler Internet Access (ZIA)
- Good understanding of: Zscaler Private Access (ZPA)
- Good understanding of: Microsoft Entra ID Access Management
- Good understanding of: Cisco Client and RADIUS Authentication Services
- Good understanding of: WAF deployment and administration
- Familiarity with security controls and configurations in: AWS
- Familiarity with security controls and configurations in: Microsoft Azure
- Familiarity with security controls and configurations in: Google Cloud Platform (GCP)
- Hands-on experience with network troubleshooting and packet analysis tools: Wireshark
- Hands-on experience with network troubleshooting and packet analysis tools: tcpdump
- Hands-on experience with network troubleshooting and packet analysis tools: Traceroute
- Hands-on experience with network troubleshooting and packet analysis tools: MTR
- Ability to diagnose complex network and security incidents effectively
- Excellent verbal and written communication skills
- Strong analytical and problem-solving capabilities
- Ability to work independently and collaboratively in a fast-paced environment
- Strong stakeholder management and customer-facing communication skills
- Flexibility to adapt to changing priorities and operational requirements
- Ability to mentor junior team members and provide technical leadership during shifts
- Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related field
- Experience supporting enterprise security environments with technologies such as Firewall, Proxy, VPN, WAF, DDoS Protection, and Cloud Security
- Hands-on administration, monitoring, and L2 troubleshooting experience with: Cisco Security Solutions, Palo Alto Networks, Fortinet Products
- ITIL v4 Foundation
- CompTIA Security+
- Network Fundamentals Certification
- Palo Alto, Fortinet, Cisco Security Certifications (preferred)
Company Overview
Company H1B Sponsorship