Join EY and cultivate a career that is as distinctively yours as you are. Benefit from global scale, supportive resources, an inclusive culture, and advanced technology designed to help you reach your full potential. Your unique perspective is vital in helping EY achieve even greater success. Contribute to building an exceptional experience for yourself and fostering a better working world for everyone.

This Senior Network Security Engineer role focuses on comprehensive firewall and VPN infrastructure management, encompassing the entire service delivery lifecycle from assessment and design to implementation, transition, and ongoing operations. The ideal candidate possesses extensive technical expertise in enterprise infrastructure security, a solid grasp of Zero Trust principles, and the capability to maintain robust security management with minimal business disruption.

Lead end-to-end firewall and VPN lifecycle management, including assessment, design, architecture review, and gap identification. Implement and configure Next-Generation Firewalls (NGFW) and VPN gateways, deploying site-to-site (IPsec) and remote-access (SSL/TLS) solutions. Manage advanced threat protection features, establish secure baseline configurations, and implement Zero Trust Architecture segmentation. Plan and execute complex migrations and cutovers with minimal downtime, developing rollback strategies and conducting User Acceptance Testing. Produce comprehensive "As-Built" documentation and SOPs. Serve as a senior technical escalation point, manage firewall rule lifecycle, and oversee firmware upgrades and vulnerability remediation. Monitor VPN performance and firewall throughput, ensuring continuous compliance with security frameworks and internal governance.

A minimum of 5 to 6 years of dedicated experience in network security engineering and operations is required. Essential skills include deep, hands-on expertise with leading NGFW platforms such as Palo Alto Networks, Fortinet, Check Point, or Cisco Firepower. Strong proficiency in configuring, troubleshooting, and scaling IPsec, SSL VPN, GRE, and SD-WAN integrations is critical. An advanced understanding of routing protocols (BGP, OSPF), NAT, VLANs, and TCP/IP fundamentals is necessary. Proven experience working through structured Assess, Build, Migrate, and Run phases within complex enterprise environments is expected. Industry-recognized vendor certifications like PCNSE, NSE 4/7, or CCSE are highly preferred, with foundational security certifications such as CISSP, CCSP, or SSCP being a strong advantage. Excellent analytical problem-solving abilities, the capacity to mentor junior analysts, and strong documentation practices are also key.