Senior SecOps Engineer

Act as the technical SME on network security, firewalls (FortiGate, Palo Alto, Check Point, or similar), and DevSecOps across presales and delivery engagements. Lead the design and review of secure cloud and hybrid architectures: network segmentation, Zero Trust, IAM, WAF, SIEM/SOAR. Own firewall and network security architecture design, sizing, and migration, including HA/failover, VPN, and segmentation. Design and implement DevSecOps pipelines: security-as-code, SAST/DAST/SCA integration, and policy-as-code.

Desired Candidate Profile

Bachelor's degree in Computer Science, Engineering, or related field. 6+ years of hands-on experience in cloud/network security, with demonstrated SME-level depth in at least two of: network security, firewalls, DevSecOps. Proven expertise with enterprise firewall platforms (FortiGate, Palo Alto, Check Point, or similar) design, migration, and HA/failover. Hands-on expertise in cloud security controls: WAF, IAM, SCPs, Secrets Management, KMS, CASB, DLP, SIEM/SOAR across AWS, Azure, and/or GCP. Strong proficiency in Infrastructure as Code and Security as Code (Terraform, CloudFormation, Azure ARM). Solid knowledge of network security fundamentals: VPNs, IDS/IPS, micro-segmentation, Zero Trust. Practical experience with container/Kubernetes security (admission controllers, service mesh, runtime scanning, policy enforcement). Experience integrating security into CI/CD pipelines (SAST/DAST/SCA tools, policy-as-code). Working knowledge of compliance frameworks: ISO 27001, SOC 2, GDPR, CIS Benchmarks. Proficiency in automation/scripting (Python, Bash, or PowerShell) for security tasks. Certificates: Fortinet NSE4+ or Palo Alto PCNSE (or equivalent), plus a cloud security certification (AWS/Azure/GCP Security Specialty) or CISSP/CCSP.