L2 Operations Engineer – Network Security

RENOVISION AUTOMATION SERVICES PVT.LTD; Gurugram District; On-site; INR 2,500,000 - 3,500,000; Full time

Job summary

RENOVISION AUTOMATION SERVICES PVT.LTD in Gurugram is seeking an L2 Operations Engineer – Network Security to manage end-to-end incident handling. You will work with Palo Alto firewalls, Zscaler, and cloud networking, ensuring security controls and policy enforcement across multi-cloud environments.

The role requires 12 years in L2 network security, strong ITSM proficiency, and excellent written and spoken English to coordinate with cross-functional teams and clients in the NCR region.

Qualifications

• 12 years of experience in L2 network security operations.
• Palo Alto firewall administration.
• Experience with Zscaler and cloud-delivered security.
• Proficient in ITSM processes and English communication.

Responsibilities

• Manage end-to-end incident handling from L1 escalation to closure.
• Run firewall health checks and address breaches.
• Collect logs and evidence for firewall alerts.
• Troubleshoot network connectivity and access requests.
• Support policy changes via change control.
• Handle firewall rules and port requests from other teams.
• Apply patches and OS upgrades per change control.
• Coordinate outage response to restore connectivity.
• Support Zscaler and Palo Alto firewalls.
• Follow client security standards and update SOPs.
• Maintain up-to-date tickets in ServiceNow.
• Collaborate across Connectivity, Hosting, IDAM, DLP, Malware tools.

Skills

L2 operations

Network security

Palo Alto

Zscaler administration

Cloud networking

ITIL / ITSM

Tools

Palo Alto firewalls

Zscaler

Okta (secondary skill)

Job description

Designation: L2 Operations Engineer – Network Security

Domain: Network Security

Job Location / Reporting Location: NCR - Gurugram

Process:

• End-to-end incident management, from L1/L1.5 escalation to closure.
• Run firewall health checks (CPU and memory) and act on breaches.
• Collect logs and evidence for firewall alert events.
• Troubleshoot reported issues and check network connectivity.
• Enable new access per application needs, through the client's change process.
• Handle port and rule requests from other teams, including server teams.
• Apply firewall patches and OS upgrades under change control.
• Handle outage calls to restore connectivity.
• Support Zscaler and Palo Alto firewalls.
• Protect data in transit and at rest from unauthorised access.
• Report security issues promptly with recommended actions.
• Follow client security standards and guidelines.
• Keep ServiceNow tickets current, with clear resolution and closure notes.
• Join RCA reviews. Update SOPs and knowledge-base articles.
• Work with Connectivity, Hosting, IDAM, DLP and Malware Tools on cross-tower issues.
• Trace policy evaluation in SSE (Zscaler Internet Access, Prisma Access and similar) – URL filtering, Cloud Firewall, SSL inspection, DLP, CASB – and in Prisma Access (security, decryption, URL filtering rules) to find unexpected allows or blocks.
• Diagnose Private Access failures across application segments, segment groups, server groups, access policies and Private Service Edge.
• Troubleshoot forwarding profiles, PAC files, trusted network detection and bypass configuration.
• Diagnose GRE and IPsec tunnel failures to Zscaler, and Remote Network and Service Connection tunnels in Prisma Access, including IKE/IPsec phase issues.
• Resolve DNS issues for private apps, including split DNS, conditional forwarding and DNS search domains.
• Troubleshoot SAML assertion and attribute problems, SCIM provisioning failures and group sync issues with Entra ID, Okta or Ping.
• Resolve device posture and trusted network check failures.
• Take and analyse packet captures (Wireshark, tcpdump, connector-side captures).
• Correlate logs across the SSE platform, SIEM, IdP and endpoint tools.
• Use ZDX and ADEM data to diagnose latency, edge selection and path problems.

Tools:

• Palo Alto firewalls (Cloud Firewalls)
• Palo Alto NGFW, Panorama, Strata Cloud Manager, Strata Logging Service, Prisma Access
• Enterprise monitoring tools
• Okta (secondary skill)

Technologies:

• Subject-matter expertise (8+ years) in NGFWs, WAFs, multi-cloud networking and security controls, core networking protocols, and security architecture – primarily Palo Alto, AWS and Azure, with GCP and Alibaba Cloud as a plus.
• Deploying security policies with IPS, URL filtering, DNS security and SSL inspection.
• Firewall security policy tuning with tools such as AlgoSec.
• Quickly identifying and remediating root cause.
• ITaaS, ITIL, monitoring and metrics.
• Access and rule management.
• TCP/IP and routing basics.

Experience:

• 12 years of experience in L2 network security operations
• Palo Alto firewall administration
• Zscaler administration (scope to be confirmed)
• Firewall rule and port request handling
• Log and evidence collection
• ITSM incident, problem and change processes
• Clear written and spoken English

Certifications:

• Palo Alto PCNSA / PCNSE
• A Proxy / SSE industry certification (Zscaler or Palo Alto)