KPMG Global Services Finance/FinTech

Firewall Management - Assistant Manager

Noida, India In person Full-time

This role is for you if you have the below

Educational qualifications

  • •Bachelor’s degree in Computer Science, Information Security, Information Technology, or a related field.
  • •Master’s degree in Cybersecurity, Cloud Computing, or Information Systems is preferred.
  • •Equivalent practical experience may be considered for exceptional candidates.

•

  • Work experience
  • •5.5–7 years in network and cloud security with progressive leadership of firewall assurance and cloud networking engagements.
  • •Oversee enterprise-scale firewall architecture, policy governance, and security assurance programs across multi-vendor environments (Palo Alto, Checkpoint, Fortinet, Cisco).
  • •Lead cross-functional teams in firewall policy optimization, change control audits, and decommissioning initiatives.
  • •Manage cloud network security strategy for AWS and Azure: design secure VPC/VNet topologies, implement transit gateways, Azure Firewall, and Network Virtual Appliances (NVAs).
  • •Architect hybrid cloud connectivity solutions (AWS Direct Connect, Azure ExpressRoute, VPN gateways) with strong emphasis on network segmentation and Zero Trust enforcement.
  • •Drive cloud security posture improvement through CSPM tooling and automated remediation.
  • •Coordinate incident response across global teams; refine playbooks, SLAs, and escalation procedures.
  • •Develop executive dashboards and present security metrics, risk posture, and compliance status to senior leadership.
  • •Lead integration of firewall logs, cloud flow logs, and threat intelligence into SIEM/SOAR platforms.

The ideal candidate will

  • •Demonstrate solid understanding of firewall architectures, network segmentation, and Zero Trust principles.
  • •Design secure network topologies, define governance workflows, and guide risk-based access enforcement.
  • •Produce clear SOPs, runbooks, firewall audit reports, and technical design documents.
  • •Collaborate with compliance, architecture, and operations teams to ensure security by design.
  • •Drive continuous improvements via automation and actionable security metrics.

•

Mandatory Certification Required

(At least one required; multiple strongly preferred)

·Cisco Certified Network Associate (CCNA)

·Palo Alto Networks Certified Network Security Administrator (PCNSA)

·AWS Certified Solutions Architect – Associate

·Microsoft AZ-500 – Microsoft Azure Security Technologies

Preferred Advanced Certifications

·Palo Alto Networks Certified Network Security Engineer (PCNSE)

Firewall Technologies

  • Mastery of enterprise firewall platforms (Palo Alto, Checkpoint, Fortinet, Cisco ASA) at scale.
  • Advanced policy design, NAT, VPN, threat prevention, and IPS optimization.
  • Proven ability to lead firewall assurance programs, audit cycles, and governance frameworks.

This role is for you if you have the below

Educational qualifications

  • •Bachelor’s degree in Computer Science, Information Security, Information Technology, or a related field.
  • •Master’s degree in Cybersecurity, Cloud Computing, or Information Systems is preferred.
  • •Equivalent practical experience may be considered for exceptional candidates.

•

  • Work experience
  • •5.5–7 years in network and cloud security with progressive leadership of firewall assurance and cloud networking engagements.
  • •Oversee enterprise-scale firewall architecture, policy governance, and security assurance programs across multi-vendor environments (Palo Alto, Checkpoint, Fortinet, Cisco).
  • •Lead cross-functional teams in firewall policy optimization, change control audits, and decommissioning initiatives.
  • •Manage cloud network security strategy for AWS and Azure: design secure VPC/VNet topologies, implement transit gateways, Azure Firewall, and Network Virtual Appliances (NVAs).
  • •Architect hybrid cloud connectivity solutions (AWS Direct Connect, Azure ExpressRoute, VPN gateways) with strong emphasis on network segmentation and Zero Trust enforcement.
  • •Drive cloud security posture improvement through CSPM tooling and automated remediation.
  • •Coordinate incident response across global teams; refine playbooks, SLAs, and escalation procedures.
  • •Develop executive dashboards and present security metrics, risk posture, and compliance status to senior leadership.
  • •Lead integration of firewall logs, cloud flow logs, and threat intelligence into SIEM/SOAR platforms.

The ideal candidate will

  • •Demonstrate solid understanding of firewall architectures, network segmentation, and Zero Trust principles.
  • •Design secure network topologies, define governance workflows, and guide risk-based access enforcement.
  • •Produce clear SOPs, runbooks, firewall audit reports, and technical design documents.
  • •Collaborate with compliance, architecture, and operations teams to ensure security by design.
  • •Drive continuous improvements via automation and actionable security metrics.

•

Mandatory Certification Required

(At least one required; multiple strongly preferred)

Core Certifications

·Cisco Certified Network Associate (CCNA)

·Palo Alto Networks Certified Network Security Administrator (PCNSA)

·Check Point Certified Security Administrator (CCSA)

·AWS Certified Solutions Architect – Associate

·Microsoft AZ-500 – Microsoft Azure Security Technologies

Preferred Advanced Certifications

·Palo Alto Networks Certified Network Security Engineer (PCNSE)

·Check Point Certified Security Expert (CCSE)

·AWS Certified Security – Specialty

·Certified Cloud Security Professional (CCSP)

·Certified Information Systems Security Professional (CISSP)

Technical Skills Required

Firewall Technologies

  • Mastery of enterprise firewall platforms (Palo Alto, Checkpoint, Fortinet, Cisco ASA) at scale.
  • Advanced policy design, NAT, VPN, threat prevention, and IPS optimization.
  • Proven ability to lead firewall assurance programs, audit cycles, and governance frameworks.

This role is for you if you have the below

Educational qualifications

  • •Bachelor’s degree in Computer Science, Information Security, Information Technology, or a related field.
  • •Master’s degree in Cybersecurity, Cloud Computing, or Information Systems is preferred.
  • •Equivalent practical experience may be considered for exceptional candidates.

•

  • Work experience
  • •5.5–7 years in network and cloud security with progressive leadership of firewall assurance and cloud networking engagements.
  • •Oversee enterprise-scale firewall architecture, policy governance, and security assurance programs across multi-vendor environments (Palo Alto, Checkpoint, Fortinet, Cisco).
  • •Lead cross-functional teams in firewall policy optimization, change control audits, and decommissioning initiatives.
  • •Manage cloud network security strategy for AWS and Azure: design secure VPC/VNet topologies, implement transit gateways, Azure Firewall, and Network Virtual Appliances (NVAs).
  • •Architect hybrid cloud connectivity solutions (AWS Direct Connect, Azure ExpressRoute, VPN gateways) with strong emphasis on network segmentation and Zero Trust enforcement.
  • •Drive cloud security posture improvement through CSPM tooling and automated remediation.
  • •Coordinate incident response across global teams; refine playbooks, SLAs, and escalation procedures.
  • •Develop executive dashboards and present security metrics, risk posture, and compliance status to senior leadership.
  • •Lead integration of firewall logs, cloud flow logs, and threat intelligence into SIEM/SOAR platforms.

The ideal candidate will

  • •Demonstrate solid understanding of firewall architectures, network segmentation, and Zero Trust principles.
  • •Design secure network topologies, define governance workflows, and guide risk-based access enforcement.
  • •Produce clear SOPs, runbooks, firewall audit reports, and technical design documents.
  • •Collaborate with compliance, architecture, and operations teams to ensure security by design.
  • •Drive continuous improvements via automation and actionable security metrics.

•

Mandatory Certification Required

(At least one required; multiple strongly preferred)

Core Certifications

·Cisco Certified Network Associate (CCNA)

·Palo Alto Networks Certified Network Security Administrator (PCNSA)

·Check Point Certified Security Administrator (CCSA)

·AWS Certified Solutions Architect – Associate

·Microsoft AZ-500 – Microsoft Azure Security Technologies

Preferred Advanced Certifications

·Palo Alto Networks Certified Network Security Engineer (PCNSE)

·Check Point Certified Security Expert (CCSE)

·AWS Certified Security – Specialty

·Certified Cloud Security Professional (CCSP)

·Certified Information Systems Security Professional (CISSP)

Technical Skills Required

Firewall Technologies

  • Mastery of enterprise firewall platforms (Palo Alto, Checkpoint, Fortinet, Cisco ASA) at scale.
  • Advanced policy design, NAT, VPN, threat prevention, and IPS optimization.
  • Proven ability to lead firewall assurance programs, audit cycles, and governance frameworks.

Job description provided by KPMG Global Services.
View the original posting