Firewall Security Management

ABOUT TCS

Join Tata Consultancy Services, Asia Pacific and be part of an organization committed to sustainable development for our future. TCS follows the Tata group philosophy of building sustainable businesses that are rooted in the community and demonstrate care for the environment. Our unique values position us to combine a purpose-driven worldview with digital innovation, collaborating with customers, communities and governments to lead and shape innovative solutions for a sustainable future. TCS has been carbon neutral in its operations across 11 countries, 12 delivery center's and 18 offices in Asia Pacific since 2022. This is only the initial stage in TCS journey as we strive to achieve long-term net zero emissions by 2030.

Corporate sustainability is embedded in our triple-bottom-line, focusing on people, the planet, and our purpose. Our offices are designed with eco-friendly features that significantly reduce our carbon footprint and enhance energy efficiency. We actively champion green initiatives, such as promoting paperless operations, implementing energy-efficient practices, and fostering employee engagement in sustainability efforts. When you become part of the TCS family, you will play an essential role dedicated to innovation, excellence, and crafting a brighter, greener future together. Join us and be a part of our mission to drive sustainability through technology and talent at Tata Consultancy Services, APAC today.

Role Summary

We are seeking an experienced Network Security Engineer responsible for the implementation, administration, optimization, and support of enterprise security solutions including Next-Generation Firewalls, IPS/IDS, Web Application Firewalls, Anti-DDoS platforms, and Bot Defense solutions. The candidate will play a key role in ensuring the organization's network and application security posture remains resilient against evolving cyber threats.

Key Responsibilities

Firewall Security Management

• Manage, configure, and troubleshoot Next-Generation Firewalls (NGFW) from:
• Palo Alto Networks
• Fortinet FortiGate
• Cisco Firepower
• Perform firewall rule reviews, policy optimization, and access control management.
• Implement security best practices and firewall hardening standards.
• Conduct firewall health checks, upgrades, patching, and high availability management.
• Utilize AlgoSec for firewall policy management, compliance validation, and change automation.

IPS/IDS Administration

• Configure, maintain, and tune IPS/IDS solutions including:
• Palo Alto Threat Prevention
• Fortinet IPS
• Cisco Firepower IPS
• Monitor security alerts and investigate suspicious activities.
• Develop and optimize signatures, policies, and threat detection capabilities.
• Perform incident analysis and recommend remediation actions.

Web Application Firewall (WAF)

• Deploy, configure, and manage F5 Advanced WAF solutions.
• Create and maintain WAF security policies.
• Analyze application-layer attacks and implement mitigation controls.
• Coordinate with application teams to secure critical web applications.

Anti-DDoS Protection

• Administer and optimize F5 DDoS mitigation solutions.
• Monitor network traffic patterns and identify attack vectors.
• Develop DDoS response procedures and mitigation strategies.
• Conduct testing and validation of protection mechanisms.

Bot Defense Management

• Implement and manage F5 Bot Defense solutions.
• Monitor and analyze automated bot activities targeting applications.
• Configure bot protection policies and exceptions.
• Reduce fraudulent traffic and protect business-critical applications.

Security Operations & Compliance

• Review security logs, alerts, and threat intelligence feeds.
• Participate in incident response activities and root cause analysis.
• Develop and maintain technical documentation, SOPs, and operational procedures.
• Support audits, vulnerability assessments, and compliance initiatives.
• Collaborate with SOC, Network, Infrastructure, and Application teams.

Required Skills & Experience

Technical Skills

• Strong hands-on experience with:
• Palo Alto Firewalls
• Fortinet FortiGate
• Cisco Firepower
• AlgoSec
• F5 WAF
• F5 Anti-DDoS
• F5 Bot Defense
• Experience in IPS/IDS tuning and administration.
• Deep understanding of:
• TCP/IP
• Routing and Switching
• SSL/TLS
• DNS
• VPN Technologies
• Network Security Architecture
• Knowledge of SIEM integration and log analysis.
• Experience in troubleshooting complex network security issues.

Certifications (Preferred)

• PCNSE (Palo Alto Networks Certified Network Security Engineer)
• NSE 4/5/7 or Fortinet Certified Professional (FCP)
• Cisco CCNP Security
• F5 Certified Administrator (F5-CA)
• CISSP, CISM, or equivalent security certifications

Experience

• 4+ years of hands-on experience in Network Security Operations.
• Experience supporting enterprise environments with multiple security platforms.
• Experience managing critical production environments and security incidents.