Firewall Management - Assistant Manager
KPMG
Noida, Indiaseniorfull timeYesterday
KPMG
This role is for you if you have the below
Educational qualifications
•Bachelor’s degree in Computer Science, Information Security, Information Technology, or a related field.
•Master’s degree in Cybersecurity, Cloud Computing, or Information Systems is preferred.
•Equivalent practical experience may be considered for exceptional candidates.
Work experience
•5.5–7 years in network and cloud security with progressive leadership of firewall assurance and cloud networking engagements.
•Oversee enterprise-scale firewall architecture, policy governance, and security assurance programs across multi-vendor environments (Palo Alto, Checkpoint, Fortinet, Cisco).
•Lead cross-functional teams in firewall policy optimization, change control audits, and decommissioning initiatives.
•Manage cloud network security strategy for AWS and Azure: design secure VPC/VNet topologies, implement transit gateways, Azure Firewall, and Network Virtual Appliances (NVAs).
•Architect hybrid cloud connectivity solutions (AWS Direct Connect, Azure ExpressRoute, VPN gateways) with strong emphasis on network segmentation and Zero Trust enforcement.
•Drive cloud security posture improvement through CSPM tooling and automated remediation.
•Coordinate incident response across global teams; refine playbooks, SLAs, and escalation procedures.
•Develop executive dashboards and present security metrics, risk posture, and compliance status to senior leadership.
•Lead integration of firewall logs, cloud flow logs, and threat intelligence into SIEM/SOAR platforms.
The ideal candidate will:
•Demonstrate solid understanding of firewall architectures, network segmentation, and Zero Trust principles.
•Design secure network topologies, define governance workflows, and guide risk-based access enforcement.
•Produce clear SOPs, runbooks, firewall audit reports, and technical design documents.
•Collaborate with compliance, architecture, and operations teams to ensure security by design.
•Drive continuous improvements via automation and actionable security metrics.
Mandatory Certification Required:
(At least one required; multiple strongly preferred)
Core Certifications
·Cisco Certified Network Associate (CCNA)
·Palo Alto Networks Certified Network Security Administrator (PCNSA)
·Check Point Certified Security Administrator (CCSA)
·AWS Certified Solutions Architect – Associate
·Microsoft AZ-500 – Microsoft Azure Security Technologies
Preferred Advanced Certifications
·Palo Alto Networks Certified Network Security Engineer (PCNSE)
·Check Point Certified Security Expert (CCSE)
·AWS Certified Security – Specialty
·Certified Cloud Security Professional (CCSP)
·Certified Information Systems Security Professional (CISSP)
Technical Skills Required:
Firewall Technologies:
• Mastery of enterprise firewall platforms (Palo Alto, Checkpoint, Fortinet, Cisco ASA) at scale.
• Advanced policy design, NAT, VPN, threat prevention, and IPS optimization.
• Proven ability to lead firewall assurance programs, audit cycles, and governance frameworks.
This role is for you if you have the below
Educational qualifications
•Bachelor’s degree in Computer Science, Information Security, Information Technology, or a related field.
•Master’s degree in Cybersecurity, Cloud Computing, or Information Systems is preferred.
•Equivalent practical experience may be considered for exceptional candidates.
Work experience
•5.5–7 years in network and cloud security with progressive leadership of firewall assurance and cloud networking engagements.
•Oversee enterprise-scale firewall architecture, policy governance, and security assurance programs across multi-vendor environments (Palo Alto, Checkpoint, Fortinet, Cisco).
•Lead cross-functional teams in firewall policy optimization, change control audits, and decommissioning initiatives.
•Manage cloud network security strategy for AWS and Azure: design secure VPC/VNet topologies, implement transit gateways, Azure Firewall, and Network Virtual Appliances (NVAs).
•Architect hybrid cloud connectivity solutions (AWS Direct Connect, Azure ExpressRoute, VPN gateways) with strong emphasis on network segmentation and Zero Trust enforcement.
•Drive cloud security posture improvement through CSPM tooling and automated remediation.
•Coordinate incident response across global teams; refine playbooks, SLAs, and escalation procedures.
•Develop executive dashboards and present security metrics, risk posture, and compliance status to senior leadership.
•Lead integration of firewall logs, cloud flow logs, and threat intelligence into SIEM/SOAR platforms.
The ideal candidate will:
•Demonstrate solid understanding of firewall architectures, network segmentation, and Zero Trust principles.
•Design secure network topologies, define governance workflows, and guide risk-based access enforcement.
•Produce clear SOPs, runbooks, firewall audit reports, and technical design documents.
•Collaborate with compliance, architecture, and operations teams to ensure security by design.
•Drive continuous improvements via automation and actionable security metrics.
Mandatory Certification Required:
(At least one required; multiple strongly preferred)
Core Certifications
·Cisco Certified Network Associate (CCNA)
·Palo Alto Networks Certified Network Security Administrator (PCNSA)
·Check Point Certified Security Administrator (CCSA)
·AWS Certified Solutions Architect – Associate
·Microsoft AZ-500 – Microsoft Azure Security Technologies
Preferred Advanced Certifications
·Palo Alto Networks Certified Network Security Engineer (PCNSE)
·Check Point Certified Security Expert (CCSE)
·AWS Certified Security – Specialty
·Certified Cloud Security Professional (CCSP)
·Certified Information Systems Security Professional (CISSP)
Technical Skills Required:
Firewall Technologies:
• Mastery of enterprise firewall platforms (Palo Alto, Checkpoint, Fortinet, Cisco ASA) at scale.
• Advanced policy design, NAT, VPN, threat prevention, and IPS optimization.
• Proven ability to lead firewall assurance programs, audit cycles, and governance frameworks.
This role is for you if you have the below
Educational qualifications
•Bachelor’s degree in Computer Science, Information Security, Information Technology, or a related field.
•Master’s degree in Cybersecurity, Cloud Computing, or Information Systems is preferred.
•Equivalent practical experience may be considered for exceptional candidates.
Work experience
•5.5–7 years in network and cloud security with progressive leadership of firewall assurance and cloud networking engagements.
•Oversee enterprise-scale firewall architecture, policy governance, and security assurance programs across multi-vendor environments (Palo Alto, Checkpoint, Fortinet, Cisco).
•Lead cross-functional teams in firewall policy optimization, change control audits, and decommissioning initiatives.
•Manage cloud network security strategy for AWS and Azure: design secure VPC/VNet topologies, implement transit gateways, Azure Firewall, and Network Virtual Appliances (NVAs).
•Architect hybrid cloud connectivity solutions (AWS Direct Connect, Azure ExpressRoute, VPN gateways) with strong emphasis on network segmentation and Zero Trust enforcement.
•Drive cloud security posture improvement through CSPM tooling and automated remediation.
•Coordinate incident response across global teams; refine playbooks, SLAs, and escalation procedures.
•Develop executive dashboards and present security metrics, risk posture, and compliance status to senior leadership.
•Lead integration of firewall logs, cloud flow logs, and threat intelligence into SIEM/SOAR platforms.
The ideal candidate will:
•Demonstrate solid understanding of firewall architectures, network segmentation, and Zero Trust principles.
•Design secure network topologies, define governance workflows, and guide risk-based access enforcement.
•Produce clear SOPs, runbooks, firewall audit reports, and technical design documents.
•Collaborate with compliance, architecture, and operations teams to ensure security by design.
•Drive continuous improvements via automation and actionable security metrics.
Mandatory Certification Required:
(At least one required; multiple strongly preferred)
Core Certifications
·Cisco Certified Network Associate (CCNA)
·Palo Alto Networks Certified Network Security Administrator (PCNSA)
·Check Point Certified Security Administrator (CCSA)
·AWS Certified Solutions Architect – Associate
·Microsoft AZ-500 – Microsoft Azure Security Technologies
Preferred Advanced Certifications
·Palo Alto Networks Certified Network Security Engineer (PCNSE)
·Check Point Certified Security Expert (CCSE)
·AWS Certified Security – Specialty
·Certified Cloud Security Professional (CCSP)
·Certified Information Systems Security Professional (CISSP)
Technical Skills Required:
Firewall Technologies:
• Mastery of enterprise firewall platforms (Palo Alto, Checkpoint, Fortinet, Cisco ASA) at scale.
• Advanced policy design, NAT, VPN, threat prevention, and IPS optimization.
• Proven ability to lead firewall assurance programs, audit cycles, and governance frameworks.
Ready to apply?
Sign up first — takes a minute — and you get Hiro’s take on this role, a resume tailored to it, and (if available) a referral from a real employee at KPMG. All free with your Pro gift.
Sign up to apply