Network/Firewall SME

1. 
   Network/ Firewall SME-

 

POSITION SUMMARY:
NXP Semiconductors is seeking a highly skilled and proactive Firewall and Network Security Lead to manage and evolve its Global Network Firewall Infrastructure, spanning on-premises and cloud environments. This role is critical to ensuring the security, scalability, and compliance of NXP’s global connectivity footprint. The position will be based in India and will play a key role in driving automation, vendor collaboration, and alignment with NXP’s IT, Security and compliance policies and governance.
Key Responsibilities:
• Design, Manage and maintain NXP’s global firewall infrastructure across on-prem and cloud platforms.
• Build and deploy new network security infrastructures, including greenfield implementations and expansion of existing environments.
• Monitor and respond to security events, alerts, and incidents, escalating as necessary and contributing to root cause analysis and remediation.
• Troubleshoot and resolve complex network security issues across multi-vendor environments, ensuring minimal downtime and optimal performance.
• Maintain accurate and up-to-date documentation, including network diagrams, configuration standards, and operational procedures.
• Work closely with InfoSec and CISO teams to align firewall and network security operations with NXP’s cybersecurity governance policies.
• Drive automation for efficient firewall provisioning, management, and monitoring using infrastructure-as-code frameworks.
• Lead and contribute to global network security projects, including platform upgrades and deployment of next-gen security capabilities.
• Perform disaster recovery processes and data backups to protect data and systems from attacks or loss.
• Plan and design networks across multiple sites and products.
• Serve as a subject matter expert in network security, particularly firewalls, VPNs, IDS/IPS, routing protocols (e.g., BGP, OSPF), and switching technologies.
• Stay current with emerging threats, vulnerabilities, and technologies to continuously improve the organization's security posture.
• Exposure to SIEM platforms, log management, and threat intelligence tools..

Qualifications:
• Bachelor’s or Master’s degree in Information Security, Computer Science, or related field.
• 8+ years of experience in network security operations
• Hands-on experience with products like Palo Alto Networks, ZScaler, Fortinet, Cisco Firewalls.
• Deep knowledge of security controls, network security protocols, cybersecurity, and data security.
• Strong understanding of network security principles, protocols (e.g., TCP/IP, VLANs, ACLs), and best practices for secure routing and switching.
• Experience with network analysis tools such as Wireshark, tcpdump.
• Experience with vendors including Cisco, Juniper, Palo Alto Networks, Fortinet, ZScaler.
• Extensive hands-on experience architecting and implementing security automation and infrastructure-as-code frameworks (Terraform, Ansible, Python, etc.).
• Certifications (preferred):
o Cisco Certified Network Professional Security (CCNP Security)
o Cisco Certified Internetwork Expert Security (CCIE Security)
o Juniper Networks Certified Internet Professional Security (JNCIP-SEC)
o Palo Alto Networks Certified Network Security Engineer (PCNSE)