Network Security Engineer-Banking
Skills
About the role
Key Responsibilities
Own firewall and WAF rule life-cycle: design, change review, implementation, optimization, and periodic recertification.
Manage SSL/TLS certificates, ciphers, and HSTS for internet-facing services; enforce secure crypto standards.
Build and maintain site-to-site VPNs, SD-WAN, and secure remote access solutions across hybrid networks.
Integrate network security controls with SIEM/SOAR and network telemetry; develop actionable runbooks.
Implement Azure/AWS network security (VNet/VPC design, NSGs/NACLs, PrivateLink, Transit Gateway/Virtual WAN, Firewall/IDS/IPS).
Deploy and govern cloud WAF and application gateways; integrate with native services where applicable.
Embed guardrails (IaC policy, tagging, security blueprints) and support DevSecOps workflows.
Required Skills
Expert hands-on with:
o F5 BIG-IP (ASM/Advanced WAF): policy tuning, attack signatures, bot and DDoS mitigation, iRules basics.
o Palo Alto Networks: security policy design, App-ID/URL filtering, Threat Prevention/WildFire, Panorama.
o Fortinet FortiGate/FortiManager/FortiAnalyzer: NGFW policies, IPS/AV/web filter, automation, logging.
o Citrix ADC (NetScaler): L7 load balancing, SSL/TLS, content switching, AppFW exposure.
Strong Azure and AWS networking & security: VNet/VPC, peering, routing, NSG/NACL, Azure Firewall/AWS Network Firewall, Application Gateway/ALB/WAF, PrivateLink, Transit Gateway/Virtual WAN.
Protocol depth: TCP/IP, BGP/OSPF, NAT, DNS, TLS, HTTP/S, IPsec/SSL VPN.
Proven experience designing for high availability, performance, and security compliance.
Good-to-Have Skills
Security first mindset with pragmatic delivery.
Ownership, attention to detail, and strong troubleshooting under pressure.
Collaboration across infra, app, SOC, and risk teams; mentoring capability.
Certifications Required
F5: 301a/b (BIG-IP LTM), 302 (ASM/Advanced WAF) or equivalent practical mastery.
Palo Alto: PCNSE.
Fortinet: NSE 4–7 (NSE 7 highly desirable).
Citrix: CCA-N/CCP-N (ADC).
Cloud: Azure Security Engineer (AZ-500), AWS Security – Specialty (or Architect certs with strong security exposure).
Skills: F5 BIG-IP , Palo Alto Networks , Fortinet FortiGate
Questions about this role
Want AI Applyd to auto-apply to roles like this?
We tailor your resume per posting, fill the forms, and track replies for you.