Role & responsibilities

We are looking for an experienced Network Security Engineer with robust hands-on expertise in F5 BIG-IP LTM, F5 GTM/DNS, and Enterprise Firewalls.

The ideal candidate should have experience working on large enterprise/data center projects involving HLD/LLD, solution design, implementation, deployment, migration, testing, production cutover, and troubleshooting across both F5 Load Balancers and Firewalls.

This is a project engineering and implementation role. Candidates with only monitoring, ticket management, or BAU/operations support experience will not be considered.

Key Responsibilities

- Design, implement, deploy, migrate and troubleshoot F5 LTM and GTM/DNS solutions in large enterprise environments.
- Prepare and review High-Level Design (HLD) and Low-Level Design (LLD) documents.
- Translate business/application requirements into technical network and security solutions.
- Perform end-to-end implementation of F5 LTM, including:

- Virtual Servers / VIPs

- Pools and Pool Members

- Health Monitors

- Profiles

- Persistence

- SNAT

- SSL Offloading
- iRules

- HA and Failover
- Perform implementation and configuration of F5 GTM/DNS, including:

- Wide IP

- GSLB

- DNS Load Balancing

- Data Center traffic distribution

- GTM synchronization
- DR and business continuity solutions
- Perform application/VIP migration and F5 platform migration activities.
- Design, configure and deploy FortiGate or Cisco ASA Firewalls.

- Configure and troubleshoot

- Firewall policies

- NAT

- ACLs

- VPN

- HA/Failover

- Routing

- Security policies
- Participate in firewall migration, replacement and deployment projects.
- Perform end-to-end traffic-flow troubleshooting across Routing/Switching Firewall F5 Application.




- Coordinate with application, network, security, infrastructure and other technical teams during project implementation.
- Prepare implementation plans, MOPs, test plans, rollback plans and technical documentation.
- Participate in production cutovers, planned maintenance and post-implementation/hypercare activities.
- Provide technical support during project deployment and resolve implementation-related issues.

Mandatory Technical Skills

F5 Load Balancing Mandatory

- F5 BIG-IP LTM
- F5 GTM/DNS
- Virtual Servers / VIPs
- Pools / Pool Members
- Health Monitors
- Persistence
- SNAT
- SSL Offloading
- iRules
- Profiles
- HA / Failover
- GSLB
- Wide IP
- DNS Load Balancing

Firewall Mandatory Hands-on experience with at least one:

- FortiGate / Fortinet
- Cisco ASA

Experience should include:
- Firewall policy configuration
- NAT
- VPN
- HA/Failover
- Routing
- ACLs
- Firewall migration
- Firewall implementation and deployment

Network & Design
- Strong Routing & Switching fundamentals
- BGP
- OSPF
- TCP/IP
- VLANs
- Network traffic-flow troubleshooting
- HLD / LLD
- Network and Security Architecture
- Data Center networking

Project Experience – Mandatory Candidates should have hands-on experience with the complete project lifecycle:

Requirement Analysis HLD LLD Design Implementation Testing Migration Production Cutover Deployment Hypercare





Candidates should have worked on large enterprise / data center projects where they were involved in both:

F5 LTM + GTM/DNS AND Firewall implementation/migration.

Candidate Profile

- 6–9 years of overall experience in Network Security / Network Engineering.
- Strong hands-on experience with both F5 LTM and F5 GTM/DNS.
- Hands-on experience with FortiGate or Cisco ASA.
- Proven experience in HLD/LLD, implementation, deployment and migration.
- Experience working in large enterprise/data center environments.
- Strong troubleshooting and analytical skills.
- Good communication and coordination skills.
- Ability to independently own technical implementation activities.

Important Note F5 LTM + F5 GTM/DNS + Firewall experience are mandatory.

Candidates with only

- F5 LTM experience,
- F5 administration/monitoring,
- Firewall support,
- BAU operations,
- Ticket-based troubleshooting,

without hands-on design, implementation, migration and deployment experience will not be considered.

Mandatory Skills

Must have all of the following:

- F5 LTM Mandatory
- F5 GTM/DNS Mandatory
- HLD/LLD – Mandatory
- F5 Implementation & Deployment – Mandatory
- F5 Migration experience – Mandatory
- FortiGate OR Cisco ASA – Mandatory
- BGP / OSPF
- Routing & Switching fundamentals
- Large Enterprise / Data Center project experience

Candidate Profile Looking for candidates who have worked on the complete project lifecycle:

Requirement Analysis HL

Requirement Analysis HLD LLD Implementation Testing Migration Production Cutover Deployment Hypercare

Candidates with only F5 administration, monitoring, incident management or BAU support experience are not suitable.

📌 Network Security engineer-and Firewall (Pune)
🏢 Norwin Technologies
📍 Pune