Network Security Engineer (NCS/Job/ 4024)

• Configure, deploy, and manage Cisco Firepower Threat Defense (FTD) using Firepower Management Center (FMC).
• Perform firewall policy management, NAT rules, access control policies, and SSL decryption.
• Handle FortiGate firewall configuration, including policies, VPNs, routing, and UTM features.
• Conduct firewall rule reviews, optimization, and cleanup (e.g., ANY-ANY removal).
• Perform firmware upgrades, patching, and vulnerability remediation.
• Troubleshoot network/security issues related to firewall infrastructure.
• Support high availability (HA) deployments and failover configurations.

Cisco ISE (Identity Services Engine)

• Implement and manage AAA (Authentication, Authorization, Accounting) using Cisco ISE.
• Configure 802.1X, MAB, TACACS+, RADIUS authentication.
• Manage network access control (NAC) policies.
• Perform certificate management and integration with AD/LDAP.
• Support ISE upgrades, patching, and endpoint onboarding.
• Troubleshoot authentication and posture-related issues.

Zscaler (Cloud Security / Proxy) 

• Manage Zscaler Internet Access (ZIA) and/or Zscaler Private Access (ZPA).
• Configure URL filtering, SSL inspection, cloud firewall policies.
• Integrate Zscaler with enterprise identity providers (e.g., SAML, AD).
• Manage traffic forwarding methods (GRE/IPsec tunnels, PAC files, Client Connector).
• Monitor logs and generate reports using Zscaler analytics.
• Support migration from traditional proxy to cloud proxy (Zscaler).

VPN & Remote Access

• Configure and support SSL VPN / IPsec VPN / Remote Access VPN.
• Manage user access, authentication integration, and certificates.
• Troubleshoot connectivity and performance issues.

Operations & Incident Management

• Handle incident, problem, and change management via tools like ServiceNow.
• Participate in CAB/TAB change reviews.
• Ensure SLA compliance and timely ticket resolution.
• Perform root cause analysis (RCA) and implement preventive measures.

Security & Compliance

• Ensure adherence to security best practices and hardening standards.
• Conduct periodic audit, compliance checks, and log reviews.
• Work with SIEM tools (e.g., Splunk/Zscaler logs) for threat analysis.
• Coordinate with vendors (Cisco TAC, Fortinet, Zscaler support).