Senior Associate – Network & Security Engineer

Job purpose

Enterprise network and security

• Administer and secure enterprise LAN/WAN infrastructure, Cisco routers and switches, firewall platforms, VPN services, and related network platforms.
• Operate Cisco, FortiGate, Palo Alto Networks, FortiWeb WAF, FortiAnalyzer, and associated monitoring and management services.
• Manage firewall policy, routing, NAT, VPN, segmentation, access control, hardening, upgrades, and lifecycle activities.

Access control and Azure networking

• Administer Cisco ISE for NAC and AAA, including 802.1X and RADIUS-based access enforcement.
• Manage TACACS+ authentication, authorization, and accounting for administrative device access.
• Design and operate Azure hub-and-spoke and landing-zone architectures using VNets, subnets, peering, NSGs, UDRs, and security zones.
• Implement hybrid connectivity using ExpressRoute and site-to-site VPN, including redundancy, failover, and disaster recovery.

Application protection and remote access

• Implement firewall, IPS/IDS, WAF, reverse-proxy, and application-publishing controls for internet-facing and internal applications.
• Configure secure application and API traffic flows, path-based routing, TLS certificates, and backend connectivity.
• Operate FortiSASE and FortiClient Zero Trust services and integrate remote access with Microsoft Entra ID, SAML, and MFA.

Troubleshooting and governance

• Provide Level-2/3 troubleshooting for network, security, cloud, and application-connectivity incidents across on-premises and Azure environments.
• Perform packet captures, flow analysis, TCP/TLS troubleshooting, route validation, latency analysis, and firewall investigations.
• Support change management, audits, vulnerability remediation, disaster recovery, regulatory reviews, and security compliance.
• Maintain architecture diagrams, firewall and WAF documentation, IP records, procedures, and operational runbooks.

Technical leadership

• Act as a technical focal point for network, cloud, security, SOC/NOC, and managed-service partners.
• Lead technical discussions, validate proposed configurations, review service performance, and escalate operational risks.
• Provide technical direction, knowledge transfer, troubleshooting support, and vendor documentation review.

Qualifications and experience

• Bachelor's degree in Computer Science, Information Technology, Network Engineering, Cybersecurity, or a related discipline.
• Requires 10 years of hands-on experience in enterprise network and network-security environments.
• Relevant experience should include routing and switching, firewall operations, NAC and AAA, hybrid-cloud networking, security operations, incident troubleshooting, vendors, and projects.
• Cisco, Fortinet, Palo Alto Networks, or Microsoft Azure certifications are preferred.
• Experience in banking, financial services, or another regulated industry is preferred.