Network Security Associate Manager

Role overview

Technical requirements

• Palo Alto NGFW and Panorama: firewall administration, centralized management, security policies, NAT, VPN, threat prevention, high availability, and troubleshooting.
• Fortinet FortiGate: firewall configuration, security policies, IPS, VPN, routing, SD-WAN, high availability, and advanced troubleshooting.
• F5 BIG-IP LTM, APM, and ASM: load balancing, application delivery, SSL offloading, VPN, access management, WAF policies, and application security.
• Infoblox DNS Security: DNS, DHCP, IPAM (DDI), DNS threat protection, and troubleshooting.
• Cloudflare WAF and DDoS: web application protection, DDoS mitigation, security rules, traffic analysis, and incident response.
• Zscaler ZIA/ZPA: secure web gateways, SSL inspection, traffic forwarding, cloud security policies, and zero-trust network access.
• Network security architecture: HLD/LLD, segmentation, DMZ, BGP/OSPF, HA/DR, secure connectivity, and defense-in-depth.

Leadership and operational responsibilities

• Lead and mentor the Network Security team, providing technical guidance and knowledge transfer.
• Act as primary technical escalation point for complex network security incidents and critical outages.
• Perform advanced troubleshooting and root cause analysis, and implement permanent corrective actions.
• Manage security changes, upgrades, configuration reviews, and infrastructure improvements.
• Ensure service availability, SLA compliance, operational efficiency, and business continuity.
• Identify security risks, architecture gaps, and continuous improvement opportunities.
• Coordinate with SOC, infrastructure and application teams, vendors, and clients to resolve complex technical issues.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, IT, or a related field.
• Minimum 8 years of relevant network security experience, including leading technical activities or teams.
• Proven hands-on experience in complex enterprise environments.
• PCNSE, Fortinet FCP/FCSS, F5, CCNP Security, CISSP, or equivalent certifications are preferred.