Network Security Engineer

Alike Thoughts; Pune District; Hybrid; INR 1,200,000 - 1,800,000; Full time

Job summary

Alike Thoughts is seeking a seasoned Network Security Engineer to administer firewall platforms (Palo Alto, Check Point) and Zscaler, while handling VPNs, NAT, and policy management. You will participate in governance, incident response, and security projects to ensure robust enterprise security across global operations.

The role requires 5 years of experience in network security, hands-on with Palo Alto, Check Point, and Zscaler, and strong routing knowledge.

Qualifications

• Experience administering Palo Alto, Check Point, and Zscaler environments.
• Strong knowledge of firewall policies, NAT, and VPNs.
• Experience with routing protocols like BGP/OSPF and network segmentation.

Responsibilities

• Administer and support firewall platforms (Palo Alto, Check Point) and related security policies.
• Configure VPNs (IPsec/SSL), NAT rules, and security zones; manage rule changes and recertifications.
• Monitor health, perform HA validation, and capacity planning for firewall fleets.
• Coordinate security policy integration with Zscaler and enterprise firewalls.
• Support incident management, root cause analysis, and change projects.

Skills

Palo Alto Firewalls

Check Point Firewall

Zscaler ZIA

IPsec VPN

SSL VPN

BGP

OSPF

VLANs

NAT

Zero Trust

Secure Internet Gateway

Tools

LogicMonitor

SolarWinds

Wireshark

ServiceNow

Panorama

Check Point SmartConsole

Job description

Mandatory skills: Palo Alto, Check Point, Zscaler, AWS.

Good to have : GCP, Azure, SCM(Strata Cloud Manager)

Key Responsibilities

Firewall Security Operations

• Administer and support documented firewall platforms including Palo Alto and Check Point environments
• Manage firewall policies NAT rules security zones URL filtering and application controls
• Perform firewall rule additions modifications deletions and recertification activities
• Configure and troubleshoot SitetoSite VPNs IPsec tunnels and remote access connectivity
• Perform firewall health monitoring HA validation failover testing and capacity management

Zscaler Security Administration

• Support Zscaler Internet Access ZIA and Secure Internet Gateway services
• Configure security policies URL filtering SSL inspection and traffic forwarding
• Troubleshoot user access application connectivity and Zscaler traffic flows
• Coordinate security policy integration between Zscaler and enterprise firewalls

Routing Switching

• Configure and troubleshoot enterprise routing protocols including BGP OSPF EIGRP and Static Routing
• Support Cisco LANWAN infrastructure VLANs STP HSRP VRRP and Layer 2Layer 3 services
• Analyze traffic flows and resolve routing switching and connectivity issues
• Perform network segmentation and secure connectivity design

Security Governance Compliance

• Ensure firewall policy compliance and adherence to security standards
• Conduct security reviews and rulebase optimization
• Support vulnerability remediation firmware upgrades and security audits
• Maintain documentation security baselines and change records

Incident Problem Management

• Investigate and resolve P1P2 security incidents
• Perform packet captures traffic analysis and root cause analysis
• Collaborate with Cyber Security Infrastructure Cloud and Application teams
• Support 24x7 operational and escalation activities

Change Project Implementation

• Prepare and execute MOPs implementation plans validation procedures and rollback strategies
• Participate in firewall migrations network transformations and security enhancement projects
• Support PANOS upgrades Check Point upgrades and security platform lifecycle management

Required Technical Skills

Security Platforms

• Palo Alto Firewalls
• Panorama
• Check Point Firewall
• Check Point SmartConsole
• Zscaler ZIA ZPA
• IPsec VPN
• SSL VPN
• Network Access Control

Routing Switching

• Cisco Routing Switching
• BGP
• OSPF
• EIGRP
• VLANs
• STP
• HSRP VRRP
• ACLs

Security Concepts

• NAT
• Security Zones
• IDSIPS
• URL Filtering
• Application Control
• Network Segmentation
• Zero Trust Security
• Secure Internet Gateway SIG

Monitoring Tools

• LogicMonitor
• SolarWinds
• Wireshark
• ServiceNow
• Panorama
• Check Point SmartConsole

Preferred Certifications

• PCNSA PCNSE Palo Alto
• CCSA CCSE Check Point
• Zscaler Certified Administrator
• CCNP Enterprise
• CCNP Security
• ITIL Foundation

Experience

• 5 years of Network Security and Firewall Administration experience
• Handson experience with Palo Alto Check Point and Zscaler environments
• Strong knowledge of routing switching security policies VPNs and enterprise network operations
• Experience supporting global enterprise or managed security service environments

Key Competencies

• Firewall Policy Management
• Security Incident Response
• Threat Mitigation
• Change Management MOP Development
• Root Cause Analysis
• Stakeholder Vendor Management
• Operational Excellence and Governance