Perimeter Security L3/L4 Level

Tata Consultancy Services; São Paulo; Presencial; BRL 120 000 - 170 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Health Insurance

Life Insurance

TotalPass

24/7 Employee Support Program (psych/法

Resumo da oferta

Tata Consultancy Services in São Paulo is seeking an experienced Network Security professional to lead policy implementation and operation across a global network. You will work with architects and engineers to ensure secure, scalable solutions using Palo Alto firewalls, GlobalProtect, and associated tools.

The role requires strong knowledge of Tufin automation and scripting, with CCNP/PCNSE certifications and experience in VPNs, decryption, and security logging.

Qualificações

• 5 years of experience in Network Security at SME level (L3/L4).
• Mandatory PCNSE & CCNP Security or CCNP R&S.
• Scripting knowledge, Python preferred (PCEP or PCAP).
• Knowledge in Tufin Automation is a plus.

Responsabilidades

• Coordinate with architects and engineers to determine optimal Network Security solutions for policy implementation.
• Deep expertise in Palo Alto Firewall features (APP-ID, USER-ID, URL Filtering, Decryption, NAT, Routing, GlobalProtect).
• Configure and troubleshoot Azure NSG, Load Balancer, and UDR.
• Build, deploy, configure and manage IPSec, Remote access and SSL VPNs.

Conhecimentos

Network Security

PCNSE

CCNP Security

CCNP R&S

Python

Tufin Automation

Ferramentas

Splunk

Palo Alto / Panorama

Descrição da oferta de emprego

Focuses on operational engineering activities across the global network, managing NextGen network security policies over the widespread network and tools managed in the operations. Core areas of focus are Firewalls (Cloud, Physical, Virtual, WAF), URL Filtering, Remote Network (Global Protect), VPN, Automation and overall operational process improvement. Firewalls are PaloAlto, CheckPoint and Splunk as the log server.

Skills and Responsibilities:

• Minimum Years of Experience: 5 years of experience in the Network Security as Level L3/L4 (SME)
• Mandatory PCNSE & CCNP Security or CCNP R&S certification
• Knowledge in scripting, prefer Python Programming (PCEP or PCAP)
• Knowledge in Tufin Automation, prefer Certified Security Expert (TCSE)

Description of duties:

• Coordinates with architects and engineers in determining best Network Security solutions for policy implementation, ensuring security and hygiene, and consistency in every policy being implemented. This would be a full consult so that the rules, object groups etc. are built for global management and scaling.
• Excellent knowledge on Palo Alto Firewall with the proficiency in APP-ID, USER-ID, URL Filtering, Decryption, NAT, Routing, Global Protect, Security & Logging Profiles and worked with Deployment and Migrations.
• Possessing knowledge of Azure NSG, Load Balancer, UDR configuration and troubleshooting.
• Building, deploying, configuring and managing IPSec, Remote access and SSL VPNs
• Good knowledge in Tufin automation and Scripting
• Troubleshooting and resolution of complex network security incidents, to include packet capture and analysis, log review, and critical thinking
• Solve complex technical problems through engineering, including requirements analysis, design, development, implementation and testing
• Monitor and test device performance, including conducting packet captures to assist in troubleshooting and incident resolution
• Demonstrating specialist level experience in processing associated requests, tasks through automation tool Tufin, and service management tool ServiceNow
• Documenting network topology with servers, load balancers, firewalls, data flows etc. to ensure we can easily support the application if there is an issue
• Efficient in reviewing existing infrastructure configuration for applications being migrated, using various tooling such as Tufin, Splunk, Panorama, PANSCAN, etc.
• Provides attention to details and ownership of the process from request through implementation
• Manage and ensure effectiveness of security solutions all times
• Demonstrate facts and data when assessing problems and considering both the customer’s perspective as well as the enterprise’s perspective while focusing on goals and objectives
• Willing to work in a 24/7 Support shift schedule on need basis

What You Can Expect from Us

• Continuous professional development aligned with your career goals
• Opportunities for international experience
• A collaborative, diverse, and innovative work environment
• Health Insurance
• Life Insurance
• TotalPass
• 24/7 Employee Support Program (psychological, legal, financial)
• Certification Reimbursement
• Learning Platform with free training and courses
• Referral Bonus Program
• Recognition Program
• Mentorship and career development platform