Join EY and forge a career path as unique as you are. Leverage global scale, supportive culture, and advanced technology to become your best self. Your distinct perspective is vital in enhancing EY's contributions to a better working world.

We are seeking a seasoned Senior Network Security Engineer with 5-6 years of experience. This pivotal role involves end-to-end management of our firewall and VPN infrastructure, encompassing the entire service delivery lifecycle: Assess, Build, Transition, and Operations. The ideal candidate will possess profound technical expertise in enterprise infrastructure security, a solid grasp of Zero Trust principles, and the capability to ensure continuous security management with minimal business disruption.

Key responsibilities include assessing existing network security postures, firewall rulesets, and VPN architectures to identify vulnerabilities. You will collaborate with architecture teams to design scalable, high-availability firewall and VPN solutions, and define rule-base standardization. Deployment and configuration of Next-Generation Firewalls (NGFW) and VPN gateways are crucial, alongside implementing advanced threat protection features and establishing secure baseline configurations.

Transitioning involves planning and executing complex firewall migrations and VPN cutovers with minimal downtime, developing rollback plans, and producing comprehensive documentation. Operations and continuous management include serving as a senior technical escalation point, performing continuous firewall rule lifecycle management, and managing firmware upgrades and vulnerability remediation. Monitoring VPN performance and ensuring compliance with security frameworks are also key aspects of this role.

The role requires 5-6 years of dedicated experience in network security engineering and operations. Deep, hands-on expertise with leading NGFW platforms such as Palo Alto Networks, Fortinet, Check Point, or Cisco Firepower is essential. Strong proficiency in configuring, troubleshooting, and scaling IPsec, SSL VPN, GRE, and SD-WAN integrations is a must.

An advanced understanding of routing protocols (BGP, OSPF), NAT, VLANs, and TCP/IP fundamentals is required. Proven experience working through structured Assess, Build, Migrate, and Run phases in complex enterprise environments is expected. While not mandatory, industry-recognized vendor certifications (e.g., PCNSE, NSE 4/7, CCSE) are highly preferred, and foundational security certifications (CISSP, CCSP, or SSCP) are a strong plus. Excellent analytical problem-solving skills, the ability to mentor junior analysts, and strong documentation practices are also vital.