Requirements

Experience in networking and security protocols (TCP/IP, HTTP(S), DNS, TLS, IPsec, Routing protocols)
Experience and Knowledge of Backbone & Datacenter technologies (EVPN, L3VPN MPLS, MPBGP, L2VPN..)
Hands-on experience with next-generation firewalls (Palo Alto Networks, Check Point, or similar)
Experience with automation using Python, Go, or equivalent
Proficiency in Unix/Linux and experience with major network vendors (Cisco, Juniper, Aruba, etc.)
Experience configuring and troubleshooting NGFW capabilities and integrations, including IPS, User-ID, Microsoft Entra ID, and ZTNA

Nice to Haves

Good knowledge of IPv6
Experience with automation tools (Ansible, Terraform, NetBox, SaltStack, etc.)
Experience with large-scale, highly available distributed systems
Knowledge of Zero Trust principles and micro-segmentation approaches
Relevant certifications (CCNP/CCIE, PCNSE, NSE 4/7) and professional working proficiency in English
Familiarity with commercial or open-source monitoring, logging, and security analytics solutions
Bonus: Exposure to DevSecOps practices, EDR/XDR platforms, offensive security, or security frameworks, standards, and regulations

Implement and maintain Zero Trust-aligned security architectures for both enterprise and data center networks
Configure Layer 3/4 & Multi-VRF Segmentation, Security Policies, Secure Remote access
Implement and test large hyper scale DC Security solutions
Integrate NGFW platforms with modern identity providers
Implement and maintain Security Capabilities, including Layer 7 application inspection, IPS, user identification
Integrate and operate monitoring tools
Regularly perform security hardening, vulnerability management, and patching and upgrades on network and infrastructure devices