Firewall Engineer

We are looking for an experienced Security Designer with strong expertise in network security design, firewall implementation, VPN deployment, and infrastructure migration.

The Security Designer will be responsible for the end-to-end design, governance, coordination, implementation support and troubleshooting of network security connectivity changes.

Responsibilities include

• Prepare and maintain Low Level Designs (LLDs) for network security solutions.
• Design, assess and implement Firewall, Proxy and VPN Gateway changes.
• Raise, track and manage Firewall RITMs and Change Requests.
• Develop communication matrices, traffic flows, port requirements and connectivity documentation.
• Liaise with platform owners, project teams, architects, Cyber Security and infrastructure stakeholders.
• Validate security requirements and ensure compliance with approved standards and policies.
• Implement approved Firewall, Proxy and VPN Gateway changes during approved maintenance windows.
• Provide troubleshooting and project delivery support for security connectivity issues.
• Maintain technical documentation, implementation plans and governance artefacts.
• Liaise with Platform Owners and the Cyber Security team to ensure Firewall RITMs are raised with complete information and approved in a timely manner.
• Review and optimise firewall policies to align with security standards, reduce rule complexity, remove redundant rules, and ensure ongoing compliance with governance and security requirements.
• Liaise with the Firewall Provisioning team to ensure approved RITMs are implemented within agreed timelines.
• Troubleshoot RITMs and associated connectivity issues where implementation does not operate as expected, and coordinate with the relevant teams to diagnose and resolve issues.

Responsibility includes the following activities

• Solution Design – High Level Design (HLD) and Low Level Design (LLD)
• Firewall & VPN Configuration – Configuration, validation, and tuning
• Router & Switch Configuration – Layer 2/3 device configuration and verification
• Network Audit & Documentation – Review of existing network environment; updates to diagrams and associated documentation
• Lab Build & Testing – Build, test, and validate both existing and new solutions in a lab environment prior to production deployment
• Firewall Commissioning – Commissioning and baseline configuration of new firewall platforms
• Firewall Migration – Structured migration from legacy firewall platforms to replacement devices
• Consolidation Activities – Rationalisation and consolidation of existing network security infrastructure
• Decommissioning – Decommissioning of retired/legacy firewalls following successful migration
• Production Implementation – All production change activities to be executed during approved Night Maintenance Windows only
• Automation & Scripting – Prepare scripts to automate daily work and increase efficiency

We specialize in Digital, ERP, and larger IT Services. We offer flexible, efficient and collaborative solutions to any organization that requires IT, experts. Our agile, agnostic, and flexible solutions will help you source the IT Expertise you need. If you are looking for new opportunities, send your profile at Sign in to view email.

Also follow ou r Linked In page for new job opportunities and more.

Zone IT Solutions is an equal opportunity employer and our recruitment process focuses on essential skills and abilities. We encourage applications from a diverse array of backgrounds, including individuals of various ethnicities, cultures, and linguistic backgrounds, as well as those with disabilities.