Network Security Engineer

Client of HR Ways

We are seeking a highly skilled and detail-oriented Senior Network & Security Engineer to lead and execute large-scale firmware upgrades, network switch upgrades, and ACL optimization across multiple enterprise locations.

The engineer will be responsible for ensuring seamless firmware patching cycles, minimizing downtime, maintaining network integrity, and aligning with cybersecurity best practices.

Key Responsibilities

Fortinet Firewall Upgrades

• Perform firmware upgrades for Fortinet Firewalls across 62 locations
• Conduct pre-upgrade health checks and compatibility validation
• Backup configurations and ensure rollback plans are documented
• Execute upgrades during approved change windows
• Perform post-upgrade validation and performance testing
• Ensure HA cluster stability (if applicable)

Huawei Network Switch Firmware Upgrades

• Upgrade firmware for 300+ Huawei switch stacks
• Validate stack configurations and redundancy prior to upgrade
• Ensure minimal service interruption during patching
• Verify routing, VLANs, STP, and trunk configurations post-upgrade
• Document upgrade logs and issues

ACL Fine-Tuning & Optimization

• Review and fine-tune Access Control Lists (ACLs) across 20 sites
• Identify redundant, shadowed, or conflicting rules
• Improve rule efficiency and network security posture
• Coordinate with Security & SOC teams for validation
• Ensure changes comply with enterprise security policy

Patching Cycle Management

Two structured patching cycles will be executed:

Cycle 1: March July (120 Days)
Cycle 2: October November (60 Days)

Responsibilities include:

• Detailed patching schedule planning
• Change management coordination
• Risk assessment & mitigation planning
• Execution tracking and reporting
• Issue escalation & vendor coordination (Fortinet / Huawei TAC)
• Final cycle completion report submission

Required Technical Skills

• Strong hands-on experience with Fortinet Firewalls (FortiGate)
• Experience upgrading HA clusters and distributed firewall environments
• Deep knowledge of Huawei Enterprise Switches
• Expertise in:
• VLANs, STP, RSTP, MSTP
• OSPF, BGP (preferred)
• ACL optimization and security hardening
• Experience in large-scale multi-site enterprise environments
• Familiarity with change management and ITIL processes
• Strong troubleshooting and rollback planning skills