Technical Specialist

**Job Title:** Technical Specialist

• Fortinet NSE Certification

• ITIL Foundation

Responsibilities

• Lead the design, architecture, and deployment of network and security solutions across enterprise environments.
• Act as the final escalation point (L3) for complex network and security incidents and problem management.
• Own and drive Root Cause Analysis (RCA) for critical and recurring issues with long-term fixes.
• Provide expert-level administration, optimization and configuration of F5, Palo Alto, Fortinet, Cisco ASA, Cisco ISE, Cisco Firepower, Wireless and Aruba ClearPass.
• Optimize and configure SD-WAN, and multi-site connectivity solutions.
• Perform firewall policy, review, and optimization aligned with security and compliance standards.
• Configure and troubleshoot VPN solutions (IPsec, SSL, site-to-site, client-based).
• Evaluate, recommend, and implement new security technologies and improvements.
• Perform security architecture reviews, risk assessments, and threat mitigation planning.
• Ensure compliance with industry standards (ISO 27001, NIST, CIS benchmarks, etc.).
• Lead vulnerability management programs and coordinate remediation efforts.
• Collaborate with SOC, audit, and risk teams for security incident response and compliance.
• Drive automation and optimization using APIs, scripting, or orchestration tools.
• Raise network/security changes (CAB) with impact analysis.
• Maintain high availability through redundancy design, failover strategies, and DR planning.
• Support large-scale wireless deployments and secure access for enterprise users.
• Ensure 24/7 service reliability, including participation in on-call escalation

Mandatory

• Strong understanding of enterprise security architecture and design.
• Expert-level knowledge of F5 (LTM/ASM/GTM), Palo Alto, Fortinet, Forcepoint, Cisco ISE, Cisco ASA/Firepower, and Aruba ClearPass.
• Deep understanding of network design (LAN/WAN/DC), routing protocols, and segmentation strategies.
• Advanced expertise in firewall rulebase optimization and security policy governance.
• Strong experience with Zero Trust Architecture (ZTA) and micro-segmentation.
• Strong understanding of SD-WAN technologies.
• Strong knowledge of threat landscape, attack vectors, and mitigation techniques.
• Understanding of network monitoring tools, SIEM integration, and performance tuning.
• Ability to lead technical discussions, solution design, and stakeholder communication.
• Exposure to SASE / ZTNA (e.g., Zscaler, Prisma Access, CrowdStrike, Centrify PAM)
• Experience with WAF (Barracuda, Cloud WAF)
• Experience in automation/scripting (Python, REST APIs, Ansible – preferred).
• Strong technical leadership and decision-making ability
• Ability to handle high-pressure incidents and critical escalations
• Excellent stakeholder management (technical & business)
• Proactive mindset with focus on continuous improvement and innovation