Network Security

Responsibility of / Expectations from the Role

Firewall Engineering (Fortigate Check Point & Palo Alto)

• Implement, and manage NGFW policies, NAT, security profiles, and segmentation

• Manage App-ID / User-ID (Palo Alto) and Identity Awareness (Check Point)

• Configure Threat Prevention profiles: IPS, Anti-Virus, Anti-Spyware, URL filtering

• Plan and execute rulebase audits, clean-ups, and optimization to reduce risk & latency

• Perform upgrades, HA/cluster configuration, health checks, and performance tuning

-

WAF & Edge Security (Cloudflare)

• Configure Cloudflare WAF (Managed Rules, custom rules, bot mitigation, rate limiting)

• Manage CDN, DDoS protection, and Zero Trust policies (ZTNA) for applications

• Implement API protection, mTLS, and secure token-based access for services

· Optimize performance & caching while maintaining application security · Monitor attack patterns, false positives, and tune rules based on application behavior