Firewall Installation & Rule Setup Engineer (FortiGate/Palo Alto/Cisco ASA)

We are looking for a highly skilled and experienced freelance Firewall Installation & Rule Setup Engineer to deploy and configure a new-generation firewall (NGFW) to enhance our network security posture. We require expert assistance in the physical installation, initial setup, and meticulous configuration of security policies and rules based on our specific business requirements and compliance needs.

The ideal candidate will have hands-on experience with leading firewall vendors and a strong understanding of security best practices. The goal is to establish robust perimeter security, protect critical assets, and control network access effectively.

Key Deliverables & Responsibilities:

• Review existing network topology and security requirements.
• Assist with the physical installation and initial setup of the chosen firewall appliance (FortiGate, Palo Alto, Cisco ASA, etc.).
• Perform initial device configuration, including management interfaces, basic network settings, and licensing.
• Design and implement granular firewall rules and security policies (e.g., NAT, access control lists, VPN tunnels, QoS).
• Configure advanced security features such as IPS/IDS, Application Control, URL Filtering, and Antivirus profiles.
• Set up secure remote access VPN (SSL VPN/IPsec VPN) for authorized users.
• Configure logging and alerting for security events, integrating with existing SIEM/monitoring systems if applicable.
• Conduct thorough testing of all implemented rules and features to ensure proper functionality and security posture.
• Provide detailed documentation of the firewall configuration, rulesets, and operational procedures.
• Offer basic knowledge transfer to our internal IT team.

Required Skills & Experience:

• Extensive experience (5+ years) in installing, configuring, and managing enterprise-grade firewalls.
• Proven expertise with at least one or more of the following: FortiGate, Palo Alto Networks (PAN-OS), Cisco ASA/Firepower, Sophos, Check Point.
• Deep understanding of network security principles, TCP/IP, routing, VLANs, and VPN technologies (IPsec, SSL VPN).
• Proficiency in designing and implementing complex firewall rule sets, NAT policies, and security profiles.
• Experience with advanced security features like IPS/IDS, application control, web filtering, and threat prevention.
• Strong troubleshooting skills for network connectivity and security policy issues.
• Excellent documentation and communication skills.
• Relevant certifications (e.g., Fortinet NSE, Palo Alto PCNSA/PCNSE, CCNA Security, CCNP Security) are highly desirable.