Bestkaam Logo
Back to Jobs
ValueSec

Network Engineer – Firewall Management (Mid-Level)

Actively Reviewing

ValueSec

Noida Full-Time 4–8 yrs exp Posted 1 day ago  · Apply by Sep 14, 2026

Company: ValueSec Technology and Consulting Pvt. Ltd.

Location: Noida, Sector-62 (On-site)

Experience: 3–4 years

Employment Type: Full-time


About the Role:

We are looking for a hands-on Network Engineer with strong firewall expertise to manage deployments and day-to-day operations across enterprise client environments. The role demands independent ownership — from greenfield firewall deployment to ongoing troubleshooting and support.


Key Responsibilities:

  • Deploy and configure firewalls from scratch — Sophos (XG/XGS), Fortinet (FortiGate), and Cisco (ASA/Firepower) — including HA setup, interface/zone design, and policy baselining
  • Configure and manage NAT/DNAT rules, security policies, web filtering, and IPS profiles
  • Create and manage site-to-site and remote-access VPN tunnels (IPsec/SSL)
  • Troubleshoot VPN tunnel issues — Phase 1/Phase 2 negotiation failures, rekey issues, routing over tunnels
  • Troubleshoot network connectivity issues end-to-end — routing, VLANs, DNS, packet-level analysis
  • Perform firmware upgrades, scheduled configuration backups, and restore procedures
  • Maintain documentation — network diagrams, firewall rule records, SOPs, and change logs
  • Coordinate with OEM TAC (Sophos, Fortinet, Cisco) for escalations and RMA


Required Skills:

  • 3–4 years hands-on experience in enterprise firewall administration
  • Strong working knowledge of Sophos XG/XGS and FortiGate; familiarity with Cisco ASA/Firepower
  • Solid fundamentals in TCP/IP, routing & switching, VLANs, and subnetting
  • Practical experience with IPsec/SSL VPNs, NAT/DNAT, and firewall rule design
  • Packet capture and analysis skills (Wireshark/tcpdump)
  • Ability to work independently at client sites and handle escalations


Good to Have:

Certifications: Sophos Certified Engineer, Fortinet NSE 4, CCNA/CCNP Security

Exposure to MSP or client-facing support environments

Familiarity with monitoring tools (Zabbix, SNMP-based monitoring)


How to Apply:

  • Send your resume to [email protected] with the subject line "Network Engineer – Firewall".
NAT