Job Description

Firewall

• Primary skill:

• Act as L3 escalation for complex firewall incidents involving traffic drops, asymmetric routing, NAT issues, SSL decryption, and application failures

• Design, implement, and optimize security policies, NAT rules, and zone-based architectures

• Perform firmware upgrades and migration activities with minimal downtime

• Lead policy cleanup, rule optimization, and performance tuning

• Conduct deep packet analysis using packet captures, logs, and threat logs

• Ensure firewall configurations align with Zero Trust, compliance, and security best practices

• Provide technical guidance to L1/L2 teams and review change implementations

Cisco ISE (L3 Responsibilities) - Secondary Skill:

• Own Cisco ISE architecture including PAN, PSN, and MNT nodes across distributed environments

• Design and troubleshoot 802.1X, MAB, TACACS+, posture assessment, and profiling

• Resolve complex issues related to authentication failures, authorization policies, certificate issues, and endpoint onboarding

• Perform ISE upgrades, patching, and node replacements

• Analyze live authentication logs and policy flows to identify root cause issues

• Optimize ISE policies for scalability, performance, and security

F5 BIG-IP - Primary along with Firewall:

• Act as L3 SME for F5 LTM covering virtual servers, pools, profiles, and i Rules

• Troubleshoot complex application performance, SSL offloading, persistence, and failover issues

• Design and maintain high-availability (Active/Standby or Active/Active) architectures

• Perform TMOS upgrades, hotfixes, and system maintenance

• Develop and modify i Rules to meet advanced application requirements

• Analyze traffic using tcpdump, i Health, and system logs

• Coordinate with application teams during deployments and incident resolution

• Ensure load balancing and security configurations meet SLA and business needs

͏

͏

͏

͏