SME - CheckPoint PPC (Software), Cloud Security
HCLTech
Chennai, Tamil Nadu, IndiaPosted about 2 months agoDiscoveredMatch locked
Full-time
Job Summary
We are seeking a highly skilled Senior Cybersecurity / Network Security Engineer with deep hands-on expertise across Cisco enterprise security solutions, micosegmentation platforms, and endpoint protection stacks. This role focuses on perimeter defense, Zero Trust architecture enforcement, endpoint security, vendor access management, and Tier-3 technical troubleshooting in a complex enterprise environment. The ideal candidate will combine strong operational troubleshooting with technical execution, supporting security operations, platform lifecycle upgrades, and continuous security posture improvement.
Key Responsibilities
Network & Perimeter Security
- Configure, manage, and optimize Cisco Firepower Threat Defense (FTD) managed centrally via Firepower Management Center (FMC) (policies, NAT, VPN, IPS/IDS, HA).
- Execute firewall rule reviews, policy cleanups, end-to-end migrations, and routine platform upgrades.
- Maintain and troubleshoot boundary defenses and network perimeter controls across enterprise environments.
Identity, Access & Micosegmentation
- Administer Cisco ISE for Network Access Control (NAC) to enforce robust identity and policy-based access.
- Deploy and maintain granular micosegmentation policies using Guardicore to enforce Zero Trust principles and prevent lateral movement across workloads.
- Manage Imprivata (SecureLink) Vendor Privileged Access Management (PAM) to control and audit third-party access.
Endpoint & Web Security
- Administer and manage policies for Cisco Secure Endpoints and Microsoft Defender for Endpoint (EDR).
- Manage Cisco Umbrella for DNS-layer security, web filtering, Secure Internet Gateway (SIG) policies, and domain threat investigations.
- Investigate endpoint alerts, perform threat hunting, and execute swift remediation.
Required Technical Skills
Network & Perimeter : Cisco FTD, Firewall Migrations & Upgrades, VPN, IPS/IDS, High Availability.
Identity & Micosegmentation : Cisco ISE (NAC), Guardicore Micosegmentation, Imprivata (SecureLink) Vendor PAM.
Endpoint & Web Security : Microsoft Defender for Endpoint, Cisco Umbrella (DNS & Web Security).
Preferred Qualifications & Certifications
Certifications : CCNP Security, CCNA Security, Microsoft SC-200, SC-300
Key Responsibilities
Network & Perimeter Security
- Configure, manage, and optimize Cisco Firepower Threat Defense (FTD) managed centrally via Firepower Management Center (FMC) (policies, NAT, VPN, IPS/IDS, HA).
- Execute firewall rule reviews, policy cleanups, end-to-end migrations, and routine platform upgrades.
- Maintain and troubleshoot boundary defenses and network perimeter controls across enterprise environments.
Identity, Access & Micosegmentation
- Administer Cisco ISE for Network Access Control (NAC) to enforce robust identity and policy-based access.
- Deploy and maintain granular micosegmentation policies using Guardicore to enforce Zero Trust principles and prevent lateral movement across workloads.
- Manage Imprivata (SecureLink) Vendor Privileged Access Management (PAM) to control and audit third-party access.
Endpoint & Web Security
- Administer and manage policies for Cisco Secure Endpoints and Microsoft Defender for Endpoint (EDR).
- Manage Cisco Umbrella for DNS-layer security, web filtering, Secure Internet Gateway (SIG) policies, and domain threat investigations.
- Investigate endpoint alerts, perform threat hunting, and execute swift remediation.
Required Technical Skills
Network & Perimeter : Cisco FTD, Firewall Migrations & Upgrades, VPN, IPS/IDS, High Availability.
Identity & Micosegmentation : Cisco ISE (NAC), Guardicore Micosegmentation, Imprivata (SecureLink) Vendor PAM.
Endpoint & Web Security : Microsoft Defender for Endpoint, Cisco Umbrella (DNS & Web Security).
Preferred Qualifications & Certifications
Certifications : CCNP Security, CCNA Security, Microsoft SC-200, SC-300
Not included in the source posting: about the role, benefits.
Skills
pamzero-trustswiftcybersecurity
Who can apply
The employer didn't state any visa, work authorization, citizenship or clearance requirements in this posting. Confirm with the employer before applying.
Read automatically from the employer's posting text. Always confirm with the employer — requirements can change after a job is published.