About the role

Job Description

Firewall and Network Security Principal Engineer

Company: NXP Semiconductors

Location: Noida/Bangalore

Position Summary

NXP Semiconductors is seeking a skilled and proactive Firewall and Network Security Engineer to support its Global Network Firewall Infrastructure, spanning on-premises and cloud environments. This role is critical to ensuring the security, scalability, and compliance of NXP's global connectivity footprint. The position will be based in India and will play a key role in driving automation, vendor collaboration, and alignment with NXP's InfoSec and CISO organizations.

Key Responsibilities

Design, Manage and maintain NXP's global firewall infrastructure across on-prem and cloud platforms.
Build and deploy new network security infrastructures, including greenfield implementations and expansion of existing environments.
Monitor and respond to security events, alerts, and incidents, escalating as necessary and contributing to root cause analysis and remediation.
Troubleshoot and resolve complex network security issues across multi-vendor environments, ensuring minimal downtime and optimal performance.
Maintain accurate and up-to-date documentation, including network diagrams, configuration standards, and operational procedures.
Work closely with InfoSec and CISO teams to align firewall and network security operations with NXP's cybersecurity governance policies.
Drive automation for efficient firewall provisioning, management, and monitoring using infrastructure-as-code frameworks.
Lead and contribute to global network security projects, including platform upgrades and deployment of next-gen security capabilities.
Perform disaster recovery processes and data backups to protect data and systems from attacks or loss.
Plan and design networks across multiple sites and products.
Serve as a subject matter expert in network security, particularly firewalls, VPNs, IDS/IPS, routing protocols (e.g., BGP, OSPF), and switching technologies.
Stay current with emerging threats, vulnerabilities, and technologies to continuously improve the organization's security posture.
Exposure to SIEM platforms, log management, and threat intelligence tools.
Design, implement, and manage cloud-native network security in Microsoft Azure (Azure Firewall, NSGs, Azure Virtual WAN, ExpressRoute) and AWS (AWS Network Firewall, Transit Gateway, Direct Connect, GuardDuty, VPC Flow Logs).
Configure and maintain secure hybrid connectivity using Azure ExpressRoute and AWS Direct Connect, including site-to-site VPNs.
Implement zero-trust network access (ZTNA) and micro-segmentation across Azure and AWS cloud environments.
Automate cloud network security provisioning using Terraform, Ansible, and Python (boto3 for AWS, Azure SDK).
Monitor cloud network traffic using Azure Monitor, Azure Network Watcher, and AWS CloudTrail for anomaly detection and incident response.
Collaborate with cloud platform and DevSecOps teams to embed network security into CI/CD pipelines and cloud landing zone designs.

Qualifications

Bachelor’s or master’s degree in information security, Computer Science, or related field.
10+ years of experience in network security operations.
Hands-on experience with products like Palo Alto Networks, Zscaler, Fortinet, Cisco Firewalls.
Hands-on experience with Azure network security services (Azure Firewall, NSG, Virtual WAN) and AWS network security services (AWS Network Firewall, Transit Gateway, GuardDuty).
Deep knowledge of security controls, network security protocols, cybersecurity, and data security.
Strong understanding of network security principles, protocols (e.g., TCP/IP, VLANs, ACLs), and best practices for secure routing and switching.
Experience with network analysis tools such as Wireshark, tcpdump.
Experience with vendors including Cisco, Juniper, Palo Alto Networks, Fortinet, Zscaler.
Extensive hands-on experience architecting and implementing security automation and infrastructure-as-code frameworks (Terraform, Ansible, Python, etc.).

Certifications (Preferred)

Cisco Certified Network Professional Security (CCNP Security)
Cisco Certified Internetwork Expert Security (CCIE Security)
Juniper Networks Certified Internet Professional Security (JNCIP-SEC)
Palo Alto Networks Certified Network Security Engineer (PCNSE)
Microsoft Certified: Azure Network Engineer Associate (AZ-700)
AWS Certified Advanced Networking - Specialty
AWS Certified Security - Specialty