Network Security Engineer

Network Protocols: TCP/IP, UDP, BGP, OSPF, EIGRP, MPLS, ISIS Layer 4 (Transport Layer): TCP, UDP, SSL termination (TLS offload) Layer 7 (Application Layer): HTTP, HTTPS, WebSocket handling URL rewriting, header injection, cookie persistence Web Gateway & DNS Zscaler (ZIA & ZPA) Administration, Infoblox Management Health Monitoring: Setting up custom health checks (HTTP 200 OK, TCP connection, etc.) WAN Technologies: MPLS, Metro Ethernet, SD-WAN, VPNs (IPSec, GRE, DMVPN), Leased Lines, LTE/5G Backup links. Hardware Knowledge: Cisco Routers/Switches (e.g., ISR, ASR series), Palo Alto Firewall, F5 BIG-IP (LTM, GTM/DNS, APM modules) Routing and Switching: Advanced configuration and troubleshooting (static/dynamic routing, VLANs, STP, Trunking, etc.) Firewall and Security: Knowledge of firewalls (Palo Alto), ACLs, VPN security, IDS/IPS basics. SD-WAN Solutions: Familiarity with Cisco Viptela, Meraki SD-WAN Monitoring and Troubleshooting Tools: Datadog, Thousand Eyes, Vital-net, Nagios, Stealth watch Cloud Networking: AWS Networking (VPCs, Direct Connect, Transit Gateway), Azure Virtual WAN, GCP networking. Traffic Management Skills Load balancing methods (Round Robin, Least Connections, Weighted Least Response Time) Persistence and Stickiness (Source IP, Session Cookie, SSL ID-based persistence) Global Server Load Balancing (GSLB) directing users to the closest/healthiest data center. SSL offloading, re-encryption, and SSL bridging.

Base Salary Range: $110,000 - $150,000 per annum

#LI-SV2