Network Security Engineer

Tata Consultancy Services Limited; Mumbai; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Tata Consultancy Services Limited requires a security engineer to design, implement, and operate NGFW policies across Fortigate, Check Point and Palo Alto, and to manage WAF, CDN, DDoS protection, and ZTNA controls for critical apps.

The role includes API protection, mTLS, and secure token-based access, plus NAC operations with Forescout, asset inventory, and remediation workflows with stakeholders.

Responsibilities

• Design, implement, and operate NGFW policies, NAT, security profiles, and segmentation
• Manage App-ID / User-ID (Palo Alto) and Identity Awareness (Check Point)
• Configure Threat Prevention profiles: IPS, Anti-Virus, Anti-Spyware, URL filtering
• Plan and execute rulebase audits, clean-ups, and optimization to reduce risk & latency
• Perform upgrades, HA/cluster configuration, health checks, and performance tuning
• Troubleshoot L3–L7 connectivity, asymmetric routing, path MTU, SSL/TLS inspection
• Configure Cloudflare WAF (Managed Rules, custom rules, bot mitigation, rate limiting)
• Manage CDN, DDoS protection, and Zero Trust policies (ZTNA) for applications
• Implement API protection, mTLS, and secure token-based access for services
• Optimize performance & caching while maintaining application security
• Monitor attack patterns, false positives, and tune rules based on application behavior
• Deploy and manage Forescout CounterACT for 802.1x / posture / device profiling Enforce zero-trust access via VLAN assignments, quarantines, and policy actions
• Integrate NAC with AD/IDP, EDR, SIEM, vulnerability scanners for contextual controls
• Maintain asset inventory, device classification (IT/IoT/OT), and posture compliance
• Build remediation workflows (e.g., patch, isolate, notify) with stakeholders

Job description

Responsibility of / Expectations from the Role

Firewall Engineering (Fortigate Check Point & Palo Alto)

• Design, implement, and operate NGFW policies, NAT, security profiles, and segmentation
• Manage App-ID / User-ID (Palo Alto) and Identity Awareness (Check Point)
• Configure Threat Prevention profiles: IPS, Anti-Virus, Anti-Spyware, URL filtering
• Plan and execute rulebase audits, clean-ups, and optimization to reduce risk & latency
• Perform upgrades, HA/cluster configuration, health checks, and performance tuning
• Troubleshoot L3–L7 connectivity, asymmetric routing, path MTU, SSL/TLS inspection

WAF & Edge Security (Cloudflare)

• Configure Cloudflare WAF (Managed Rules, custom rules, bot mitigation, rate limiting) Manage CDN, DDoS protection, and Zero Trust policies (ZTNA) for applications
• Implement API protection, mTLS, and secure token-based access for services
• Optimize performance & caching while maintaining application security
• Monitor attack patterns, false positives, and tune rules based on application behavior

NAC Operations (Forescout Platform)

• Deploy and manage Forescout CounterACT for 802.1x / posture / device profiling Enforce zero-trust access via VLAN assignments, quarantines, and policy actions
• Integrate NAC with AD/IDP, EDR, SIEM, vulnerability scanners for contextual controls
• Maintain asset inventory, device classification (IT/IoT/OT), and posture compliance
• Build remediation workflows (e.g., patch, isolate, notify) with stakeholders