Network Security Engineer

What success looks like in this role: Skill Set: Firewall Security Engineer (Basic Troubleshooting, Fortinet and Palo Alto, Any Firewall Experience) 1.

Responsibilities

• Core Firewall Skills Fortinet FortiGate Understanding of FortiOS CLI and GUI navigation
• Interface, zone, and VDOM configuration (including HA pairs such as FGT-A/B) Firewall policy creation, review, and troubleshooting (source, destination, service, NAT, security profiles)

static routes, BGP, OSPF, and policy-based routing

• Basic VPN troubleshooting (IPsec site-to-site, SSL VPN) HA status checks (get system ha status), failover validation, and config sync
• diagnose sniffer packet, diagnose debug flow, get router info bgp, session table review
• Log review and threat/event analysis via FortiAnalyzer or FortiGate logs
• Firmware upgrade planning and config backup/restore Palo Alto Networks PAN-OS navigation (web UI and CLI) Security policy, NAT policy, and Zone-based configuration
• Security profiles (Antivirus, Anti-Spyware, URL Filtering, File Blocking, WildFire) Routing: static, BGP, and OSPF on virtual routers VPN: IPsec tunnels and GlobalProtect basics HA (active/passive, active/active) status and failover checks
• show session all, test security-policy-match, packet-capture, show routing route, debug dataplane, system and traffic logs

Panorama basics for centralized management

• Content and PAN-OS upgrade planning Vendor-Neutral Firewall Concepts Stateful inspection, NAT (SNAT, DNAT, PAT), and zone-based design OSI layer troubleshooting approach (ping, traceroute, packet capture, logs)
• BGP fundamentals (peering, AS-path, local preference, route advertisement) IPsec and TLS basics

Asymmetric routing and how it causes dropped sessions

• Change management and rollback practices 2.
• Cloud and Network Platform Skills Microsoft Azure networking: VNets, peering, Route Server, ExpressRoute, VPN Gateway, Network Security Groups, and route tables (UDR) Azure NVA deployment: Understanding of firewall appliances deployed as virtual machines in hub-spoke topologies
• Peer status, learned and advertised routes, and route preference ExpressRoute and Global Reach: Basic understanding of circuit and peering behavior
• Azure Portal, Azure CLI, and Network Watcher (connection troubleshoot, NSG flow logs, IP flow verify)
• VLANs, subnetting, ARP, and L2 extension concepts 3.
• Operations Skills These map to the role’s responsibility to work with senior security engineers on protection, detection, and response.

Security policy hardening and least-privilege rule design

• Threat log analysis and incident triage (IPS, malware, malicious URL, and blocked-traffic events)
• Basic SIEM familiarity (Splunk, Microsoft Sentinel, or FortiAnalyzer) Vulnerability and patch awareness for firewall OS and platform software

containment steps, evidence collection, and escalation

• identify, protect, detect, respond, recover 4.
• Following approved change plans, runbooks, and rollback steps for adds, moves, and changes
• Maintaining operating procedures, configuration records, and network diagrams
• Working with GITS, application owners, and senior engineers during maintenance windows
• Clear status updates, escalation of blockers, and stakeholder notifications 5.
• Metrics and Reporting Collecting firewall and security metrics on a routine basis (policy hit counts, blocked threats, VPN uptime, HA status, and device health)
• Producing weekly or monthly reports for senior security engineers and management
• Tracking change success rate, incident trends, and patch compliance

Requirements

• Using ServiceNow, Jira, or similar tools to request, track, and close work
• Supporting cutovers, parallel runs, and knowledge transfer

Preferred

• Using dashboards in FortiAnalyzer, Palo Alto Panorama or Cortex, Azure Monitor, or similar tools

You will be successful in this role if you have: BA/BS degree and 0-2 years’ relevant experience OR equivalent combination of education and experience Unisys is proud to be an equal opportunity employer that considers all qualified applicants without regard to age, blood type, caste, citizenship, color, disability, family medical history, family status, ethnicity, gender, gender expression, gender identity, genetic information, marital status, national origin, parental status, pregnancy, race, religion, sex, sexual orientation, transgender status, veteran status or any other category protected by law. Local employment practices and rights may vary by jurisdiction and are subject to applicable local laws. This commitment includes our efforts to provide for all those who seek to express interest in employment the opportunity to participate without barriers. If you are a US job seeker unable to review the job opportunities herein, or cannot otherwise complete your expression of interest, without additional assistance and would like to discuss a request for reasonable accommodation, please contact our Global Recruiting organization at GlobalRecruiting@unisys.com . US job seekers can find more information about Unisys’ EEO commitment here .