Apply on Employer Site

Mindlance · 3 months ago

Senior Network Security Engineer

Orange, CT

Full-time

Onsite

Senior Level

$61/hr - $63/hr

5+ years exp

Mindlance is seeking a highly skilled Senior Network Security Engineer to join their team and play a key role in securing, optimizing, and transforming their enterprise network infrastructure. The ideal candidate will manage and enhance the security infrastructure, focusing on firewall security, cloud security solutions, and network routing protocols.

Human Resources

H1B Sponsor Likely

Responsibilities

Manage and enhance our security infrastructure, which includes: Cisco ASA, Checkpoint, Fortinet FortiGate, Palo Alto Firewalls

Radware for DDoS protection

Zscaler ZIA/ZPA for cloud security

SD-WAN for optimized global connectivity

EIGRP, BGP, and OSPF-based network routing

NAT policy design and implementation

Lead the migration from Checkpoint to Fortinet, including policy conversion, rule optimization, and traffic validation

Manage and maintain Cisco ASA, Palo Alto, Fortinet, and Checkpoint firewalls across corporate, cloud, and remote sites

Design and optimize firewall rule sets for improved security, performance, and compliance

Perform risk assessments and firewall audits to ensure network security best practices

Manage and optimize SD-WAN architecture to improve application performance and reduce latency

Implement policy-based traffic steering, failover mechanisms, and WAN optimization

Ensure seamless integration between SD-WAN, firewalls, cloud security solutions, and on-prem networks

Troubleshoot SD-WAN performance issues, routing conflicts, and connectivity problems

Qualification

Firewall securitySD-WAN solutionsRouting protocolsCloud security solutionsVPN technologiesNAT policy designDDoS protectionZero-trust securityRisk assessmentsFirewall auditsTraffic validationPolicy optimization

Required

5-8 years of experience in network security engineering

Expertise in Fortinet FortiGate, Checkpoint, Palo Alto, and Cisco ASA firewalls

Strong knowledge of SD-WAN solutions (Fortinet SD-WAN, Cisco SD-WAN, Prisma Access)

Experience configuring and troubleshooting EIGRP, BGP, and OSPF routing protocols

Hands-on experience managing Zscaler ZIA/ZPA for cloud security

Proficiency in VPN technologies (IPSec, SSL, GRE, DMVPN, L2TP) and their security implications

Strong skills in NAT, firewall rule optimization, and routing table analysis

Experience with Radware DDoS protection, IPS/IDS, and threat mitigation

Knowledge of zero-trust security architectures and secure SD-WAN implementation