Network Security Administrator (NSA) คืออะไร?
ผู้รับผิดชอบ ออกแบบ นำไปปฏิบัติ และดูแลนโยบายความปลอดภัยเครือข่าย (Network Security Policy) รวมถึงการประเมินภัยคุกคาม การติดตั้ง/ตั้งค่าระบบป้องกัน และการตอบสนองเหตุการณ์ (Incident Response) ระดับ Operation
📋 หน้าที่หลัก (Core Responsibilities)
| Domain | Key Activities |
|---|
| Policy & Governance | เขียน/ปรับปรุง Network Security Policy, Standard, Baseline Config, Compliance Mapping |
| Firewall & Perimeter Mgmt | Manage Rule Sets (Palo Alto, FortiGate, Check Point, Cisco), Change Mgmt, Rule Recertification, Optimization |
| VPN & Remote Access | IPsec/SSL VPN, ZTNA, MFA Integration, Client Provisioning, Log Monitoring |
| Network Segmentation | VLAN, Zone Design, Micro-segmentation, Inter-zone Firewall Rules, ACL Management |
| Monitoring & Detection | SIEM Log Ingestion (Firewall, Proxy, DNS, Flow), Alert Tuning, Threat Hunting Support |
| Vulnerability Mgmt | Network Scans (Nessus, OpenVAS), Patch Coordination, Asset Inventory, Risk Prioritization |
| Incident Response | Triage Network Alerts, PCAP Analysis, Containment (Block IP, Quarantine VLAN), Forensics Support |
| Admin & Ops | Backup Config, Firmware Upgrade, HA/Failover Testing, Documentation, Runbooks |
🛠️ ทักษะเทคนิคที่จำเป็น (Must-have Skills)
- Networking Core: TCP/IP, Routing (OSPF, BGP, EIGRP), Switching (VLAN, STP, LACP), DNS, DHCP
- Firewall Mastery: 1-2 Vendor Deep (Palo Alto PCNSE, Fortinet NSE4+, Cisco FTD/ASA, Check Point CCSE)
- Scripting/Automation: Python (Netmiko, NAPALM, Ansible), Terraform, API Integration
- Cloud Network Security: AWS (Security Groups, TGW, Firewall), Azure (NSG, Firewall), GCP (VPC FW, NCC)
- Monitoring Tools: Splunk/Elastic/KQL, NetFlow/IPFIX, Zeek/Bro, Suricata/Snort
- Certifications: CCNA/CCNP Security, PCNSE, NSE 4/5/6/7, Security+, CySA+, GCFA
📊 Network Admin vs Security Admin vs Network Security Engineer
| Role | Focus | Typical Tasks | Cert Path |
|---|
| Network Administrator | Availability, Performance, Connectivity | Routing, Switching, Wireless, VPN, Monitoring (SolarWinds, PRTG) | CCNA, CCNP Enterprise, JNCIA |
| System Administrator | Server/OS/Application Health | Windows/Linux, AD, Patch, Backup, Virtualization, Cloud | MCSA/MCSE, RHCSA/RHCE, AWS/Azure Admin |
| Network Security Administrator | Security Policy, Prevention, Detection | Firewall, VPN, Segmentation, SIEM, Vuln Mgmt, IR | PCNSE, NSE, CCNP Security, GCFA |
| Network Security Engineer | Architecture, Design, Advanced Engineering | Zero Trust, SASE, Cloud Sec, Automation, Red/Purple Team | CISSP, CCSP, PCNSE, OSCP, GSE |
💰 เงินเดือนและโอกาส (Thailand 2024)
- Junior (0-2 ปี): 35,000 - 60,000 บาท/เดือน
- Mid (3-5 ปี): 60,000 - 110,000 บาท/เดือน
- Senior (5-8 ปี): 110,000 - 180,000 บาท/เดือน
- Lead/Principal: 180,000 - 300,000+ บาท/เดือน
- Remote/International: $60k - $150k+ USD/ปี
🚀 Career Progression
NOC/SOC L1 → Network Admin → Network Security Admin → Senior NSA
↓ ↓
Security Engineer ←←←←←←←←←←←←←←←←←←←←←←←←←←←←←←←←←←
↓
Security Architect / Principal Engineer
↓
CISO / Security Director / Consultant
💡 เคล็ดลับสำหรับผู้เริ่มต้น
- สร้าง Home Lab: GNS3/EVE-NG + Firewall VM (Palo Alto VM-Series Free, FortiGate VM Trial)
- ทำ Mini Projects: "Firewall Rule Cleanup", "VPN MFA Rollout", "SIEM Onboarding Firewall Logs"
- เรียนรู้ Automation ตั้งแต่ต้น: Ansible Network Modules, Python Netmiko
- เข้าร่วม Community: Thai Network Engineers, Thai Cybersecurity, OWASP Thailand, BSides Bangkok
- Target Cert Path: CCNA → CCNP Security/PCNSE → CISSP/CCSP
