Network Security Engineer

Roles & Responsibilities EOL & Lifecycle Management Own lifecycle management for security platforms including: Firewalls: Fortinet, Check Point, Cisco, Juniper SRX Load Balancers: F5 BIG-IP (LTM/GTM) DDI Platforms: Infoblox, BlueCat Track EOL/EOS announcements, vulnerability advisories, and vendor support status Maintain centralized lifecycle inventory and compliance tracking Define upgrade, patching, and tech refresh roadmap Software & Hardware Upgrades Plan and execute OS upgrades, firmware patches, and version standardization Lead hardware refresh and migration activities with minimal business impact Develop rollback strategies and risk mitigation plans Security & Compliance Ensure platforms meet MUFG security policies, audit, and regulatory requirements Mitigate risks from unsupported or vulnerable systems through compensating controls Support audits, IS reviews, and cybersecurity assessments Operations & Engineering Act as escalation point for complex security platform issues Work with architects and vendors on modernization initiatives Standardized configurations, hardening baselines, and deployment templates Automation & Optimization Drive automation for lifecycle tracking, upgrades, and compliance reporting Improve efficiency using scripting (Python/Ansible) Documentation & Governance Maintain lifecycle dashboards, architecture documentation, and SOPs Provide reporting to management on compliance posture and risks Technical Requirements Strong hands-on experience with: Firewalls (Fortinet, Check Point, Cisco ASA/FTD, Juniper SRX) F5 BIG-IP (LTM/GTM) DDI (Infoblox / BlueCat) Knowledge of: Network security architecture (DMZ, segmentation, Zero Trust) Load balancing, DNS security, WAF/DDoS Good understanding of: OS lifecycle management, patching strategies, vendor advisories Automation (Ansible, Python) Familiarity with enterprise monitoring tools (SolarWinds, Netscout) Job Requirements 8–12 years’ experience in network security end of life cycle management Proven experience in infrastructure lifecycle / refresh programs Strong stakeholder management across regional and global teams Experience in banking / regulated environments preferred Education & Certification Bachelor’s Degree in IT / Computer Science or equivalent Good to have certifications: Fortinet NSE / Check Point / Palo Alto / Cisco F5 Certified (optional)