1. Network & Security Architecture concept and implantation
   • Own the design and lifecycle of the two‑tier firewall architecture (Palo Alto at the edge and FortiGate at internal/DMZ tier ), including HA pairs, policy segmentation, and east–west traffic control.
   • Implement and optimize zone‑based segmentation, micro‑segmentation, and zero‑trust principles across datacenter, campus, and branch networks.
2. Routing, Switching & Performance
   • Design and operate BGP/OSPF between sites, ISPs, and MPLS/SD‑WAN (if applicable).
   • Manage L2/L3 infrastructure (Cisco/Aruba/Juniper/etc.): VLANs, VTP, LACP, Spanning‑Tree, HSRP/VRRP, QoS, and Multicast if used.
   •  Firewall & Threat Prevention (Palo Alto + FortiGate)
   • Own policy frameworks for App‑ID, User‑ID, SSL/TLS decryption (where appropriate), URL filtering, IPS/IDS, WildFire, DNS security, Anti‑Malware, and Geo‑IP.
   • Regularly review rules for recertification, cleanup shadowed/unused rules, and enforce least‑privilege.
3. VPN & Third‑Party Connectivity
   • Lead all site‑to‑site IPsec VPNs for branches and partners: key exchange (IKEv2), crypto profiles, PFS, lifetimes, tunnel monitoring, link redundancy, and failover.
   • Establish third‑party connectivity standards (onboarding checklist, routing policy, NAT strategy, scoped firewall policies, identity/control, logging & SLAs).
   • 5) Monitoring, Logging & Incident Response
   • Build and tune proactive monitoring/alerting (e.g., FortiAnalyzer, Panorama, Syslog/SIEM, NetFlow/IPFIX, SNMP, PRTG/SolarWinds/Zabbix).
   • Compliance, Risk & Change Management
   • Conduct periodic risk assessments, vulnerability remediation (with SOC/Blue Team), and policy attestation.
4.  Business Continuity & DR
   • Architect HA/failover for firewalls, VPN site to site , core switches, and WAN edge; test DR and site failover.
   • Maintain backup/restore procedures, configuration version control, and offline vaulting for device configs and licenses.
   • Leadership & Vendor Management

• Education: Bachelor’s in Computer Science, Information Systems, or related field (or equivalent experience).
• Experience: 3-5+ years in enterprise networking & security; 3+ years leading or architecting firewall/VPN environments at scale; proven experience with Palo Alto and FortiGate in production.
• Technical
  1. Palo Alto: NGFW, Panorama, App‑ID/User‑ID, Threat/URL/AV/IPS, SSL decryption, WildFire, routing, HA.
  2. Fortinet: FortiGate, FortiManager, FortiAnalyzer, IPS/AV/Web filtering, SD‑WAN (preferred), HA.
  3. VPN: IPsec site‑to‑site (multi‑vendor), third‑party onboarding, dual‑ISP failover, BGP over IPsec (preferred).
  4. Routing/Switching: BGP, OSPF, HSRP/VRRP, STP, VLANs, ACLs, NAT, QoS.
  5. Tooling: Wireshark, packet capture on firewalls, NetFlow/IPFIX, SNMP, syslog/SIEM (Q-Rada).

• Certifications (strongly preferred)
  1. PCNSE (Palo Alto Networks Certified Network Security Engineer)
  2. Fortinet NSE 4–7 (or equivalent current NSE/FCX track)
  3. CCNP Enterprise (or JNCIP/JNCIS)
  4. ITIL Foundation (nice to have)
  5. CISSP/CCSP (nice to have for policy/governance)

​​​​​​​Benefit:

• Salary: Negotiable
• Working Schedule: Monday to Friday, 8:00 AM - 5:00 PM
• Transportation Allowance: Provided monthly gasoline allowance for traveling from home to work and back home.
• Transportation Gasoline: Provided to Outside Staff for Business’s purpose based on roles and responsibilities
• Motor Rental: Provided to Outside Staff.
• Maternity Allowance: Provided for baby delivered to Male and Female staff.
• Marriage Allowance: Provided to all staffs.