Assistant Manager (Networking Specialist), IT

• Own the design and lifecycle of the two‑tier firewall architecture (Palo Alto at the edge and FortiGate at internal/DMZ tier ), including HA pairs, policy segmentation, and east–west traffic control.
• Implement and optimize zone‑based segmentation, micro‑segmentation, and zero‑trust principles across datacenter, campus, and branch networks.
• Design and operate BGP/OSPF between sites, ISPs, and MPLS/SD‑WAN (if applicable).
• Manage L2/L3 infrastructure (Cisco/Aruba/Juniper/etc.): VLANs, VTP, LACP, Spanning‑Tree, HSRP/VRRP, QoS, and Multicast if used.
• Own policy frameworks for App‑ID, User‑ID, SSL/TLS decryption (where appropriate), URL filtering, IPS/IDS, WildFire, DNS security, Anti‑Malware, and Geo‑IP.
• Regularly review rules for recertification, cleanup shadowed/unused rules, and enforce least‑privilege.
• Lead all site‑to‑site IPsec VPNs for branches and partners: key exchange (IKEv2), crypto profiles, PFS, lifetimes, tunnel monitoring, link redundancy, and failover.
• Establish third‑party connectivity standards (onboarding checklist, routing policy, NAT strategy, scoped firewall policies, identity/control, logging & SLAs).
• Build and tune proactive monitoring/alerting (e.g., FortiAnalyzer, Panorama, Syslog/SIEM, NetFlow/IPFIX, SNMP, PRTG/SolarWinds/Zabbix).
• Conduct periodic risk assessments, vulnerability remediation (with SOC/Blue Team), and policy attestation.
• Architect HA/failover for firewalls, VPN site to site , core switches, and WAN edge; test DR and site failover.
• Maintain backup/restore procedures, configuration version control, and offline vaulting for device configs and licenses.

• Education: Bachelor’s in Computer Science, Information Systems, or related field (or equivalent experience).
• Experience: 3-5+ years in enterprise networking & security; 3+ years leading or architecting firewall/VPN environments at scale; proven experience with Palo Alto and FortiGate in production.

Technical

• Palo Alto: NGFW, Panorama, App‑ID/User‑ID, Threat/URL/AV/IPS, SSL decryption, WildFire, routing, HA
• Fortinet: FortiGate, FortiManager, FortiAnalyzer, IPS/AV/Web filtering, SD‑WAN (preferred),HA
• VPN: IPsec site‑to‑site (multi‑vendor), third‑party onboarding, dual‑ISP failover, BGP over IPsec (preferred).

d.Routing/Switching: BGP, OSPF, HSRP/VRRP, STP, VLANs, ACLs, NAT, QoS. e.Tooling: Wireshark, packet capture on firewalls, NetFlow/ IPFIX, SNMP, syslog/SIEM (Q-Rada). Certifications (strongly preferred) a .PCNSE (Palo Alto Networks Certified Network Security Engineer)

• Fortinet NSE 4–7 (or equivalent current NSE/FCX track)
• CCNP Enterprise (or JNCIP/JNCIS)
• ITIL Foundation (nice to have)
• CISSP/CCSP (nice to have for policy/governance)