Senior Network Engineer

Job Description

Network Security Engineer Palo Alto Firewall

Palo Alto NGFW Panorama Routing & Switching

FieldDetail

Role Title

Network Security Engineer (Palo Alto)

Function

Network & Security Operations

Experience Range : 510 years

Location : Pune

CTC : Up to 25 LPA

Engagement Type

Full-time

Reports To

Network Security Lead

1. Role Summary

Operate and support enterprise Palo Alto firewall infrastructure (NGFW + Panorama) across BAU, change, and incident workflows. Maintain security posture, drive policy hygiene, and resolve firewall-related incidents end-to-end with working-level routing and switching depth to troubleshoot connectivity issues that intersect the perimeter.

2. Key Responsibilities

Day-to-day operation of Palo Alto NGFW estate health monitoring, policy management, software/content updates, HA pair management.

Centralised management via Panorama device groups, templates, log forwarding, commit and push workflows.

Firewall change management rule analysis, policy authoring, optimization, decommissioning of stale rules.

Incident response and troubleshooting traffic flow analysis, packet capture, session table review, threat-log triage.

Security profiles and threat prevention URL filtering, App-ID, User-ID, WildFire, vulnerability and anti-spyware tuning.

VPN operations IPsec site-to-site, GlobalProtect remote access, certificate lifecycle, troubleshooting.

Routing and switching support troubleshoot OSPF/BGP/static routing, VLANs, trunking, and connectivity issues that touch the firewall perimeter.

Documentation maintain runbooks, network diagrams, firewall rule registers, change logs.

Compliance and audit evidence collection, configuration baseline reviews, support internal/external audits.

Participate in on-call rotation for P1/P2 firewall and connectivity incidents.

3. Required Skills

DomainMust HavePreferred

Palo Alto Firewall

Hands-on with PAN-OS 10.x/11.x, Panorama, security policy authoring, App-ID, User-ID, threat profiles, VPN, HA

Cortex XDR, Prisma Access / SASE, automation via Panorama API

Certifications (Mandatory)

PCNSA (Network Security Administrator) AND PCNSE (Network Security Engineer)

PCSAE, PCNSC, Prisma certifications

Routing & Switching

Working knowledge: VLANs, trunking, STP, static and dynamic routing (OSPF/BGP basics), troubleshooting Layer 2/3

CCNA / CCNP, multi-vendor exposure (Cisco, Arista, Juniper)

Network Tooling

Packet capture (Wireshark / TCPDump), syslog, SNMP-based monitoring, ITSM ticket workflows

SolarWinds, Splunk, Logic Monitor, Datadog

Operational Discipline

Change management (CAB), incident response, root-cause analysis, on-call rotation

ITIL Foundation

4. Behavioural

Strong ownership sees firewall and connectivity issues through to resolution.

Calm under pressure effective during P1 incidents and security events.

Documentation-disciplined writes clean change records and runbooks.

Clear communicator explains technical issues to non-network stakeholders.

5. Qualifications

Bachelor's degree in Computer Science, Engineering, or related (or equivalent practical experience).