Project Lead

Job Description

Job Summary -

Subject Matter Expert - Firewall, IDS/IPS & DDOS.

Purpose:

Seeking highly skilled Subject Matter Expert (SME)- Security engineer to perform obsolete hardware replacements, code upgrades, and configuration compatibility validation for both physical and virtual appliances. The role includes expertise in multi-context firewalls, IDS/IPS configurations, DDOS (Arbor) solutions, conducting pre- and post- validation testing, and ensuring operational stability in critical production environments. Engineer must have expertise in Cisco Firewalls/Palo Alto/FortiGate/ Check points and IDS/IPS & DDOS (Arbor).

Technical Skills:

Expertise in upgrading and managing code, image, firmware, bootstrap programs, software and security patches for network security devices like Firewalls/IDS/IPS (Cisco/Palo Alto/Juniper/Forti Gate/Check points), DDOS (Arbor) deployed in on-premises, remote and third-party data centers.

Demonstrated ability to replace obsolete hardware and virtual appliances through detailed planning, including pre-upgrade checks, backup strategies, testing procedures, and rollback plans for both physical and virtual components.

Risk assessment and execution, ensuring compatibility and performance in production environments.

Firewalls & IDS/IPS:

o Plan and implement the lifecycle replacement of end-of-support (EOS) and end-of-life (EOL) security appliance, optimizing infrastructure resilience.

o Analyze configuration compatibility between old and new firmware versions or hardware models, identifying and resolving conflicts to ensure seamless transition.

o Migrate and validate configurations, including NAT policies, VPN tunnels, IDS/IPS rules and muti-context setups, to new hardware or virtual appliances.

o Conduct rigorous pre-upgrade and post-upgrade testing, including failover scenarios and security rule verification, to ensure operational stability and policy consistency.

DDOS Protection (Arbor Networks):

o Proficient in upgrading and replacing DDOS mitigation hardware and virtual appliances, such as Arbor Edge Defense (AED).

o Ability to analyze network flow, configure threshold policies, and test mitigation strategies to ensure uninterrupted services.

o Skilled in integrating DDOS Protection with upstream and downstream devices during replacement/ upgrades.

Capability to implement and validate the configurations, Security policies and Application policies post-upgrade.

Documentation and compliance - Define lifecycle management strategies for hardware and software. Maintain comprehensive documentation of upgrade activities, including change management logs and compliance reports.

Ensure adherence to organizational security standards, change processes and industry best practices throughout the upgrade process.

Good to Have: Knowledge on ansible/python (For automation and troubleshooting), cloud-native networking services and tools (AWS, AZURE).

Certifications Needed:

NA

About Mphasis

Mphasis applies next-generation technology to help enterprises transform businesses globally. Customer centricity is foundational to Mphasis and is reflected in the Mphasis Front2Back Transformation approach. Front2Back uses the exponential power of cloud and cognitive to provide hyper-personalized (C=X2C2TM=1) digital experience to clients and their end customers. Mphasis Service Transformation approach helps shrink the core through the application of digital technologies across legacy environments within an enterprise, enabling businesses to stay ahead in a changing world. Mphasis core reference architectures and tools, speed and innovation with domain expertise and specialization are key to building strong relationships with marquee clients.