Sr. Network Security Engineer with Juniper SRX

Area(s) of responsibility

Skills: Network Security Engineer with Juniper SRX

Experience: 8-11 years

Location: Bangalore Only

Key Responsibilities

Segmentation & Zero Trust Responsibilities (Juniper SRX Focus)

• Architect and implement network segmentation strategies using Juniper SRX firewalls across data center, campus, and cloud environments to limit lateral movement and enforce least-privilege access.

• Design and operationalize Zero Trust Architecture (ZTA) principles, integrating identity, application, and network-based policy enforcement using firewall controls.

• Collaborate with application owners to discover, validate, and map application dependencies to enable policy-driven segmentation via firewall rules and security zones.

• Define and enforce granular security policies using zone-based segmentation, VRFs, and SRX policy constructs across hybrid environments.

• Integrate segmentation with firewalls, SIEM, IAM, EDR/XDR, and cloud-native controls for unified policy enforcement.

• Lead adoption and standardization of Juniper SRX as the primary segmentation enforcement platform across enterprise environments.

• Develop segmentation governance models, policy lifecycle management, and compliance alignment (CIS/NIST/Zero Trust frameworks).

Network Security & Infrastructure

• Strong experience managing LAN/WAN security technologies, including firewalls, IDS/IPS, SIEM, VPN, and NAC.

• Expertise in firewall architecture and design with strong hands-on experience in Juniper SRX (primary), along with Fortinet and Palo Alto.

• Deep expertise in:

• Security zones, policies, NAT, routing

• Application control and threat prevention

• High-availability clustering and scale design

• Experience securing public and private cloud (AWS, Azure, GCP) environments.

• Design and implementation of Web Application and API Protection (WAAP) solutions.

• Strong experience in proxy (forward/reverse), load balancing, and application security integration.

• Experience with SDN and SD-WAN architectures, including segmentation use cases.

Networking & Protocol Expertise

• Strong knowledge of:

• Routing protocols: BGP, OSPF, RIP, MPLS

• Network services: DNS, DHCP, NTP

• IPv4/IPv6 architecture and traffic management

• Experience in QoS, NetFlow, ACLs, NAT, multicast, and wireless technologies (802.11 variants).

• Experience with F5 GTM/LTM, VPN technologies, and Internet proxy solutions.

Data Center & Infrastructure

• Experience managing enterprise data center environments with technologies including:

• Aruba, Arista, Juniper switching

• Firewalls, WAN optimization, IDS/IPS, DLP

Strong understanding of structured cabling and network facilities