Senior Network Security Engineer - Firewall Migration

About the role

Ibex is seeking a Senior Network Security Engineer to lead a large‑scale firewall migration and security transformation for a client in Karachi/Lahore. The role is hands‑on, night‑shift based, and covers the full project lifecycle from assessment to post‑deployment support.

Key responsibilities

• Conduct discovery, document current network and security architecture, and produce design recommendations.
• Review, optimize and migrate security policies, objects and configurations across next‑generation firewalls.
• Design and implement target security architecture, including HA, VPN, NAT, IPS and SSL/TLS inspection.
• Plan and execute deployment, develop rollback strategies, and lead production cutover activities.
• Develop test plans, validate connectivity, logging and monitoring, and resolve issues during testing and after go‑live.

Required profile

• 8+ years of enterprise network security engineering experience, with 5+ years on next‑gen firewall platforms.
• Proven track record leading complex security transformation projects from planning through support.
• Strong communication, stakeholder management and documentation skills.
• Ability to work U.S. business hours and participate in night‑shift maintenance windows.

Required skills

• Next‑generation firewall technologies, security policy management, NAT, VPN, IPS, web filtering, SSL/TLS inspection.
• Network protocols: OSPF, BGP, VLANs, VRFs, static routing, policy‑based routing.
• High‑availability design, security monitoring and logging solutions.
• Automation: Python, Ansible, APIs.
• SIEM integrations: Splunk, Microsoft Sentinel, QRadar.
• Identity/access integrations: Active Directory, Entra ID, SAML.