Firewall Engineer/cyber Security Engineer

**Roles & Responsibilities**:

- Designing and implementing new network solutions and/or improving the efficiency of current networks
- Installing, configuring, and supporting network equipment including routers, switches & wireless controller/access points and network access control
- Configuring firewalls, routing, and switching to maximise network efficiency and security troubleshooting/ fault finding network incidents
- Ensure network connectivity of all servers, workstations/laptops, telephony equipment, printers, and production equipment/tools
- Perform and arrange network device/ firewall firmware upgrade or preventive maintenance activities
- Provide systems engineering and operational support for the IT infrastructure components
- Manage and maintain an up-to-date IT asset and patch information list, network diagrams, system requests, and documented processes for the operations and maintenance of the platforms
- Develop and improve instrumentations to monitor the health and availability of the systems-related infrastructure, Experience with monitoring toolsProvide day-to-day network administration support

**Daily/Standard Operational Support Tasks**:

- **Hardware Break/Fix Support**
Perform hardware troubleshooting.
Log support tickets and coordinate with principal/vendor support teams until resolution.
- **Firewall Rule Management**
Create, maintain, and modify firewall rules based on customer-approved configurations or documented instructions.
Ensure all rule sets comply with industry best practices and customer security policy standards.
Provide support for immediate rule adjustments in response to validated security threats, following emergency CR procedures.
Assist with rollback procedures in the event of faulty rule deployments or system failures, based on customer SOPs.

**Monthly/Quarterly Support Tasks**:

- Optimize firewall rule sets to block unauthorized inbound/outbound network traffic.
- Maintain up-to-date backups of all firewall configuration settings.
- Perform firmware upgrades as per approved/requested versions/images.
- Submit a detailed Change Request (CR) report outlining:
Configuration changes
Requester and approver
Timestamp
Rationale

**‘Unique’ Firewall Management Services**:

- Manage whitelisting/blacklisting of IPs/IOCs via API.
- Provide standby engineering support for weekly pre-planned customer events:
Address dynamic IP ranges assigned at event sites.
Ensure proper backend firewall configuration to allow necessary connectivity.

**Key Requirements**:
**Education**:

- Diploma in IT, Computer Science, or related discipline.

**Experience**:

- Minimum 3-5 years of hands-on experience in network administration.
- Proven experience with HPE, Aruba, Cisco equipment.
- Strong background in LAN, WAN, and WLAN design, implementation, and troubleshooting.

**Technical Skills**:

- Solid understanding of network hardware, protocols, and Internet standards:
Routers, switches (Layer 2/3), firewalls, remote access, DNS, BGP, OSPF, VLAN, QoS, VPN.
- Hands-on expertise with:
Firewalls, Routers, VLANs, and routing protocols.
DMZ, Cyber Security, server hardening, and firewall administration.
- Proficiency in network capacity planning, network security principles, and general network management best practices.

**Soft Skills**:

- Ability to work with all levels of staff across the organization.
- Capable of managing multiple projects from design to implementation.
- Strong communication and interpersonal skills.
- Excellent organizational, analytical, and problem-solving abilities.
- Positive attitude and a proactive approach.