Network & Security Senior | Firewalls

Project overview

Missions and responsibilities

A. Firewall administration and operation

· Ensure the administration, configuration, and daily operation of Palo Alto Networks, Fortinet, and Check Point firewalls.

· Ensure the administration, configuration, and daily operation of the Trend Micro IPS

· Ensure the administration, configuration, and daily operation of the Fortinet Anti-DDoS solution

· Administer network filtering policies, security rules, and traffic control mechanisms.

· Ensure the management of network objects, security zones, NAT rules, and routing policies.

· Configure and maintain advanced protection mechanisms: IPS/IDS, application control, URL filtering, SSL/TLS inspection, and threat prevention.

· Administer centralized firewall management solutions, including Panorama, FortiManager, and Check Point SmartConsole.

· Ensure monitoring of equipment performance, availability, and proper functioning.

· Participate in maintenance, update, hardening, and migration operations for security equipment.

B. Securing network architectures and traffic

· Analyze network architectures and contribute to improving their security level.

· Implement and optimize network segmentation and isolation mechanisms.

· Ensure the security of traffic between different trust zones: LAN, DMZ, datacenters, partners, and the Internet.

· Administer and maintain secure interconnection mechanisms, including IPsec VPN and SSL VPN tunnels, according to deployed solutions.

· Participate in the configuration and supervision of firewall high availability and redundancy mechanisms.

· Analyze traffic opening requests and verify their compliance with security policies.

· Perform periodic reviews of filtering rules to identify obsolete, excessively permissive, or unjustified rules.

· Contribute to the application of the principle of least privilege in network communication management.

C. Supervision and handling of security incidents

· Ensure the analysis of logs, alerts, and security events from network equipment.

· Identify and analyze intrusion attempts, suspicious communications, and abnormal network behavior.

· Contribute to incident handling in coordination with CISO, SOC, and infrastructure teams.

· Implement appropriate containment and blocking measures for identified threats, in accordance with security procedures.

· Participate in the integration and operation of firewall security logs at the SIEM/SOC level.

· Perform technical investigations and contribute to identifying the causes of incidents.

D. Optimization and continuous improvement

· Perform periodic analyses of equipment configuration and security level.

· Propose recommendations for hardening and optimizing filtering policies.

· Participate in the definition and application of secure configuration standards.

· Contribute to projects for the evolution, expansion, and modernization of network security infrastructures.

· Formalize and maintain technical documentation, operating procedures, and reference configurations.

· Ensure regular backup of configurations.

Project details

• Start: flexible
• Location: Casablanca, Morocco, MA
• Languages: French