
SME CheckPoint PPC (Software), Cloud Security
HCLTech · Chennai, Tamil Nadu, India
Applications are made on HCLTech's own site. We never sit in the middle.
Job description
SME - CheckPoint PPC (Software), Cloud Security India SME - CheckPoint PPC (Software), Cloud Security Chennai, Tamil Nadu Job Summary We are seeking a highly skilled Senior Cybersecurity / Network Security Engineer with deep hands-on expertise across Cisco enterprise security solutions, micosegmentation platforms, and endpoint protection stacks. This role focuses on perimeter defense, Zero Trust architecture enforcement, endpoint security, vendor access management, and Tier-3 technical troubleshooting in a complex enterprise environment. The ideal candidate will combine strong operational troubleshooting with technical execution, supporting security operations, platform lifecycle upgrades, and continuous security posture improvement. Key Responsibilities Network & Perimeter Security Configure, manage, and optimize Cisco Firepower Threat Defense (FTD) managed centrally via Firepower Management Center (FMC) (policies, NAT, VPN, IPS/IDS, HA). Execute firewall rule reviews, policy cleanups, end-to-end migrations, and routine platform upgrades. Maintain and troubleshoot boundary defenses and network perimeter controls across enterprise environments. Identity, Access & Micosegmentation Administer Cisco ISE for Network Access Control (NAC) to enforce robust identity and policy-based access. Deploy and maintain granular micosegmentation policies using Guardicore to enforce Zero Trust principles and prevent lateral movement across workloads. Manage Imprivata (SecureLink) Vendor Privileged Access Management (PAM) to control and audit third-party access. Endpoint & Web Security Administer and manage policies for Cisco Secure Endpoints and Microsoft Defender for Endpoint (EDR). Manage Cisco Umbrella for DNS-layer security, web filtering, Secure Internet Gateway (SIG) policies, and domain threat investigations. Investigate endpoint alerts, perform threat hunting, and execute swift remediation. Required Technical Skills Network & Perimeter : Cisco FTD, Firewall Migrations & Upgrades, VPN, IPS/IDS, High Availability. Identity & Micosegmentation : Cisco ISE (NAC), Guardicore Micosegmentation, Imprivata (SecureLink) Vendor PAM. Endpoint & Web Security : Microsoft Defender for Endpoint, Cisco Umbrella (DNS & Web Security). Preferred Qualifications & Certifications Certifications : CCNP Security, CCNA Security, Microsoft SC-200, SC-300 Key Responsibilities Network & Perimeter Security Configure, manage, and optimize Cisco Firepower Threat Defense (FTD) managed centrally via Firepower Management Center (FMC) (policies, NAT, VPN, IPS/IDS, HA). Execute firewall rule reviews, policy cleanups, end-to-end migrations, and routine platform upgrades. Maintain and troubleshoot boundary defenses and network perimeter controls across enterprise environments. Identity, Access & Micosegmentation Administer Cisco ISE for Network Access Control (NAC) to enforce robust identity and policy-based access. Deploy and maintain granular micosegmentation policies using Guardicore to enforce Zero Trust principles and prevent lateral movement across workloads. Manage Imprivata (SecureLink) Vendor Privileged Access Management (PAM) to control and audit third-party access. Endpoint & Web Security Administer and manage policies for Cisco Secure Endpoints and Microsoft Defender for Endpoint (EDR). Manage Cisco Umbrella for DNS-layer security, web filtering, Secure Internet Gateway (SIG) policies, and domain threat investigations. Investigate endpoint alerts, perform threat hunting, and execute swift remediation. Skill Requirements Network & Perimeter : Cisco FTD, Firewall Migrations & Upgrades, VPN, IPS/IDS, High Availability. Identity & Micosegmentation : Cisco ISE (NAC), Guardicore Micosegmentation, Imprivata (SecureLink) Vendor PAM. Endpoint & Web Security : Microsoft Defender for Endpoint, Cisco Umbrella (DNS & Web Security). Other Requirements Preferred Qualifications & Certifications Certifications : CCNP Security, CCNA Security, Microsoft SC-200, SC-300