Security Engineer

About the role

CDS is seeking a hands-on Security Engineer to support customer implementation and technical escalation requirements. The role needs working-level capability across network security technologies, with exposure to Cisco Secure Firewall/FTD, Cisco ISE, Palo Alto Networks and Fortinet platforms.

You will deliver configuration, troubleshooting, incident resolution, change implementation, documentation and customer support for enterprise network security environments.

Key responsibilities

1. 01

   Perform firewall policy, NAT, VPN and security-profile changes on Cisco Secure Firewall/FTD, Palo Alto and Fortinet platforms.

2. 02

   Support Cisco ISE deployments and operations, including AAA, RADIUS, TACACS+, authentication, authorisation, guest access and network-access policy troubleshooting.

3. 03

   Troubleshoot site-to-site VPN, remote-access VPN, dual-ISP failover and firewall-policy issues.

4. 04

   Configure and troubleshoot firewall rules and security policies on Cisco Meraki MX, where applicable.

5. 05

   Assist with firewall migration, upgrade, implementation and security-hardening activities.

6. 06

   Analyse security incidents using device logs, monitoring tools, packet captures and diagnostic commands, and provide clear technical findings and corrective actions.

7. 07

   Execute approved changes in line with CDS change-management processes, and prepare implementation plans, test plans and rollback procedures.

8. 08

   Coordinate with customer IT teams, ISPs, OEM TAC, internal L2/L3 engineers and the network team on incident resolution and escalations.

9. 09

   Prepare and maintain HLD/LLD inputs, network and security diagrams, configuration backups, SOPs, MOPs, reports and RCA documentation.

10. 10

    Support service reviews with security-posture, incident and improvement inputs.

11. 11

    Take part in rotational on-call support and planned maintenance activities, as required.

Required technical skills

Firewall and network security

1. 01

   Cisco Secure Firewall / Firepower Threat Defense (FTD) and FMC exposure.

2. 02

   Palo Alto firewall policy, NAT, zones, security profiles and VPN fundamentals.

3. 03

   FortiGate firewall policy, NAT, IPsec VPN, SSL VPN, SD-WAN and UTM profile fundamentals.

4. 04

   Firewall-rule review, security segmentation, access control and basic IPS/IDS concepts.

5. 05

   Cisco ISE fundamentals: RADIUS/TACACS+, 802.1X, guest access, profiling and policy troubleshooting.

Foundational networking

1. 01

   Working knowledge of TCP/IP, VLANs, routing fundamentals, NAT, DNS and DHCP as they relate to security configuration and troubleshooting.

2. 02

   Familiarity with Cisco Catalyst switching and Cisco Meraki MX / SD-WAN security environments is an advantage.

Qualifications and certifications

• Bachelor’s degree or diplomaIn Computer Science, IT, Electronics, Telecommunications or a related field
• CCNAMandatory
• CCNP SecurityPreferred
• Palo Alto certificationPreferred
• Fortinet FCA or FCP, Network SecurityPreferred
• Cisco Certified Specialist, Network Security FirepowerAn advantage, or equivalent FTD knowledge
• Cisco ISE certificationAn advantage, or practical ISE deployment and support experience

How you’ll work

1. 01

   Strong troubleshooting and problem-solving skills.

2. 02

   Clear verbal and written communication with customers.

3. 03

   Owns assigned incidents, changes and deliverables through to closure.

4. 04

   Good documentation discipline and adherence to security and change-control processes.

5. 05

   Works independently and collaborates with senior engineers, project managers, OEMs and customer teams.

6. 06

   Willing to work in a managed-services environment and take part in on-call support when required.

How you’re measured

1. 01

   Incident-resolution quality and SLA compliance.

2. 02

   Successful completion of approved security changes and implementation activities.

3. 03

   First-time-right configuration and fewer repeat security incidents.

4. 04

   Quality and timeliness of customer updates, technical reports and documentation.

5. 05

   RCA contribution, recurring-incident reduction and security-improvement recommendations.

6. 06

   Customer satisfaction and adherence to CDS technical and operational standards.

How to apply

Email your CV to hr@cdspl.com with the role in the subject line, and include your certifications. A current CCNA is mandatory for this role.