Sr. Engineer- Network Security | On-site, Bangalore

This position will be on-site reporting to our Bangalore office M-F.

This team provides 24/7 support. This role requires shift flexibility, including the ability to rotate between days, mids, and nights.

The Sr. Network Security Engineer will be responsible for providing expert day-to-day management of our clients' firewall security environments. This core responsibility includes overseeing the entire lifecycle of firewall ticket triaging, policy administration, and configuration management.

While the primary focus is on Palo Alto environments, this individual will also manage, FortiGate, and Cisco solutions ensuring optimal application delivery, high availability, redundancy, and seamless connection management.

The ideal candidate will be a versatile security professional, capable of integrating knowledge from adjacent security domains, including the implementation of automation strategies and supporting robust cloud security initiatives.

Our engineers are skilled technical and consultative resources expected to be strong in both technical and soft skills. An engineer must be driven and proactive with the ability to problem solve, communicate, participate in diverse project teams from a technical perspective, and interface effectively with customers, vendor partners, and colleagues. Establish and maintain productive and respectful relationships with the delivery team, practice management, and client management team.

How you'll make an impact

• Deploy, and administer physical and virtual Palo Alto Networks NextGeneration Firewalls (NGFWs) across enterprise environments.

• Configure and manage security policies, NAT rules, application control, and threatprevention profiles to enforce secure network operations.

• Implement and support GlobalProtect VPN, IPSec, and SSL tunnel configurations for secure remote connectivity.

• Utilize Panorama for centralized administration, policy management, device group operations, and environment-wide configuration governance.

• Monitor, analyze, and interpret firewall logs and alerts; investigate security events and drive timely remediation of firewall-related incidents.

• Conduct recurring firewall rule reviews, perform policy clean-up activities, and optimize configurations to maintain compliance and improve performance.

• Integrate NGFW solutions with SIEM platforms, identity and access management (IAM) systems, and multi-factor authentication technologies.

• Manage advanced Palo Alto features including URL filtering, WildFire malware analysis, DNS Security, and SSL decryption to strengthen threat defense posture.

• Apply and enforce zone-based security architecture principles, ensuring leastprivilege access across segmented network zones.

• Plan, schedule, and execute firmware upgrades; configure and maintain High Availability (HA) pairs; perform disaster recovery (DR) validation tests.

• Develop and maintain comprehensive documentation, including security standards, operational procedures, network diagrams, and configuration artifacts.

• Collaborate closely with SOC, NOC, architecture, and compliance teams to ensure alignment with regulatory standards such as ISO and PCIDSS.

• Demonstrate working knowledge of public, private, and hybrid cloud networking concepts with exposure to Microsoft Azure and Amazon AWS.

• Leverage ITIL processes to manage incidents, problems, changes, and service requests in accordance with organizational requirements.

• Log and track all incidents, change activities, and service requests using the designated ITSM/helpdesk platform.

• Coordinate with vendors for timely issue resolution, hardware/software support, and escalations when necessary.

• Maintain operational SLAs, escalating issues promptly to ensure continuity of service.

• Provide afterhours and weekend support as required for emergency events, planned maintenance, or critical deployments.

• Hands-on experience managing with Palo Alto, FortiGate, and Cisco platforms to a proficient/advanced level

• Hands-on experience with cloud providers, specifically AWS and Azure (GCP optional).

• Minimum six (6) years of hands-on experience with Palo Alto solutions.

• Minimum six (6) years of professional Information Security experience in a consulting, vendor, or enterprise level role.

• Fully qualified or certified on one or more relevant technologies.

• Demonstrated ability to lead and mentor junior colleagues.

• Ability to work effectively in a ITIL based, client-facing 24x7 environment balancing responsiveness, communication, and technical precision while maintaining strong customer relationship
  
  Certifications:

• PCNSE - Palo Alto Networks Certified Network Security Engineer

• Prisma Cloud Security Engineer

• Cisco CCNA / CCNP Security

• Fortinet NSE4-NSE7

• Cloud Security Certifications (AWS, GCP, Azure)

• A company committed to our inclusive value through our Employee Resource Groups
• Work/life balance
• Professional training resources
• Creative problem-solving and the ability to tackle unique, complex projects
• Volunteer Opportunities. "Optiv Chips In" encourages employees to volunteer and engage with their teams and communities.
• The ability and technology necessary to productively work remotely/from home (where applicable)