Network Firewall Engineer

About Us:

LTIMindtree is a global technology consulting and digital solutions company that enables enterprises across industries to reimagine business models, accelerate innovation, and maximize growth by harnessing digital technologies. As a digital transformation partner to more than 700+ clients, LTIMindtree brings extensive domain and technology expertise to help drive superior competitive differentiation, customer experiences, and business outcomes in a converging world. Powered by nearly 90,000 talented and entrepreneurial professionals across more than 30 countries, LTIMindtree — a Larsen & Toubro Group company — combines the industry-acclaimed strengths of erstwhile Larsen and Toubro Infotech and Mindtree in solving the most complex business challenges and delivering transformation at scale. For more information, please visit www.ltimindtree.com.

 Job Title: Network Firewall Engineer

 Work Location: Krakow, Poland /Hybrid 

 Job Description:

• 5+ years of network/security administration,
• 2+ years of network security experience, and a bachelor degree is generally required
• In-depth understanding of network perimeter architecture, routing, NAT'ing, etc.
• Updates and maintains Information Security policies, standards, procedures, and other related documents
• Proficiency should include checking server and firewall logs, scrutinizing network traffic, establishing and updating virus scans, troubleshooting, analyzing and resolving security breaches and vulnerability issues
• Network Security skills: Firewall, IPS/IDS, Web filtering, etc.
• In-Depth Routed/Routing Protocols: BGP, OSPF, MPLS, VRF, VPNs
• Experience with configuring all Palo Alto Networks Firewall models as well as a centralized management system (Panorama) to manage large scale firewall deployments
• PCNSE, Palo Alto ACE, CCNA, CCNA Security CCNP/CCIE Certifications preferred

Job Responsibilities:

• Review Firewall Security Requests and work with requesters to implement approved, least-privilege rules which minimize risk, but still enable critical business functions
• Support Internet/Extranet Engineering through use of Firewalls, IDS/IPS, various proxy gateway and other network security devices to provide protection from cyber security threats
• Implement Site-to-Site VPNs between Client and our Business Partners when required

Note: Nice to have - Cisco ASA, Ready to work in weekend shifts, on call or overtime when required