Senior Firewall & SSE Security Engineer

We are hiring a Senior Firewall & SSE Security Engineer
Experience: 8+yrs
Mode: Hybrid
Location: Bangalore
Certification Firewall / network-security certification required
Primary Focus Palo Alto NGFW/Panorama/SSE, Fortinet and Cisco ASA/Firepower
Role Summary:
Senior network security engineer responsible for firewall and Secure Service Edge implementation, migration,policy transformation and production cutover across Palo Alto Networks, Fortinet and Cisco technologies.
Key Responsibilities / Implementation Scope
• Design, configure, migrate and troubleshoot enterprise firewall services across Palo Alto Networks,Fortinet and Cisco firewall platforms.
• Implement and support Palo Alto Networks NGFW platforms including PA-5450 and PA-3220, with security zones, interfaces, routing, NAT, security policy and threat-prevention profiles.
• Configure and operate Panorama for centralized policy, object, template/device-group and firewall management.
• Support Fortinet FortiGate firewalls, including OT firewall requirements and industrial/segmented network use cases where applicable.
• Support legacy Cisco ASA and Cisco Firepower / Secure Firewall environments during migration and replacement activities, including VPN appliance functions where present.
• Support Palo Alto SSE / Prisma Access / GlobalProtect components where required for remote-user and secure-access connectivity.
• Build and migrate firewall policies, NAT/PAT rules, objects, zones, security profiles and networksegmentation controls.
• Configure and troubleshoot site-to-site IPsec VPNs, remote-access dependencies, routing through firewalls and failover/high-availability behavior.
• Perform rule-base analysis, cleanup, optimization and validation while maintaining business connectivity and change-control requirements.
• Troubleshoot application flows using session/browser tools, packet captures, firewall logs and routing/NAT analysis.
• Execute firewall cutovers/migrations with pre-checks, validation, rollback support, issue resolution and hypercare.
• Prepare implementation runbooks, policy migration workbooks, test scripts, rollback plans and as-built documentation.
Required Technical Skills
Area Required Hands-on Experience
Palo Alto NGFW PA-5450, PA-3220, PAN-OS, zones, interfaces, routing, NAT, security policy,threat prevention and SSL/TLS inspection.
Panorama Centralized firewall management, device groups, templates/template stacks,
objects, policy deployment and operational troubleshooting.
Palo Alto SSE / Remote Access Palo Alto SSE, Prisma Access and GlobalProtect architecture/operations whescope.
Fortinet FortiGate policy, routing, NAT, VPN, segmentation and OT firewall use cases
Cisco Firewall Cisco ASA and Cisco Firepower / Secure Firewall; legacy support, migration
appliance functions.
VPN / Segmentation IPsec VPN, remote-access dependencies, network segmentation, zone-baseand high-availability/failover concepts.
Troubleshooting / Migration Session analysis, logs, packet capture, NAT/routing analysis, rule-base cleanvendor firewall migration and production cutover.
Certification Requirements
Mandatory: At least one relevant firewall/network-security certification is required (for example PCNSE, Cisco
CCNP Security, or an appropriate current Fortinet professional-level credential).
Preferred / Advantageous: Additional Palo Alto, Cisco Secure Firewall/Firepower or Fortinet specialist
certifications and multi-vendor firewall migration experience.
Required Deliverables
• Firewall policy/NAT/object migration workbook
• Implementation runbooks and MOPs
• Firewall/SSE cutover and rollback plans
• Connectivity, security-policy and failover test scripts
• As-built configuration, rule-base documentation and operational handover

Work arrangement
Hybrid