Network Security Engineer SME

Zensar Technologies; Maharashtra; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Zensar Technologies is seeking a Firewall Engineer to deploy and manage security appliances from Palo Alto and Fortinet. The role focuses on policy design, centralised management, and VPN integrations across large-scale environments.

You will monitor security events, ensure high availability, and coordinate with global teams to uphold security postures. Prior experience with PAN-OS and FortiOS is essential.

Responsibilities

• Install, configure, and maintain Palo Alto firewalls and Fortinet FortiGate devices.
• Design and audit firewall rule bases, security profiles, and NAT policies.
• Manage large-scale environments using Palo Alto Panorama and Fortinet FortiManager / FortiAnalyzer.
• Establish and secure Site-to-Site IPsec VPNs and Remote Access VPNs (GlobalProtect, FortiClient).
• Monitor security logs to detect anomalies and potential breaches.
• Maintain redundant firewall clusters (HA Active/Passive and Active/Active).

Job description

• Deployment & Config: Install, configure, and maintain Palo Alto (PA-Series) and Fortinet (FortiGate) firewalls.
• Policy Management: Design and audit firewall rule bases, security profiles, and NAT policies.
• Centralised Management: Manage large-scale environments using Palo Alto Panorama and Fortinet FortiManager / FortiAnalyzer.
• VPN Management: Establish and secure Site-to-Site IPsec VPNs and Remote Access VPNs (GlobalProtect, FortiClient).
• Network Security Operations
• Threat Mitigation: Configure advanced security features including IPS/IDS, URL filtering, Anti-
• Upgrade & Patching: Perform routine firmware upgrades, hotfixes, and vulnerability patching.
• Monitoring: Analyze security logs to detect anomalies, unauthorized access, or potential network breaches.
• High Availability: Maintain redundant firewall clusters (HA Active/Passive and Active/Active topologies).

Job Description

• Deployment & Config: Install, configure, and maintain Palo Alto (PA-Series) and Fortinet (FortiGate) firewalls.
• Policy Management: Design and audit firewall rule bases, security profiles, and NAT policies.
• Centralised Management: Manage large-scale environments using Palo Alto Panorama and Fortinet FortiManager / FortiAnalyzer.
• VPN Management: Establish and secure Site-to-Site IPsec VPNs and Remote Access VPNs (GlobalProtect, FortiClient).
• Network Security Operations
• Threat Mitigation: Configure advanced security features including IPS/IDS, URL filtering, Anti-
• Upgrade & Patching: Perform routine firmware upgrades, hotfixes, and vulnerability patching.
• Monitoring: Analyze security logs to detect anomalies, unauthorized access, or potential network breaches.
• High Availability: Maintain redundant firewall clusters (HA Active/Passive and Active/Active topologies).

Traffic Management & Core Network Services (DDI)

• Application Delivery: Configure F5 BIG-IP LTM (Local Traffic Manager), including VIPs, Pools, Monitors, SSL offloading, and advanced iRules.
• IPAM & DDI: Manage Infoblox Grid Manager to run high-availability DNS, DHCP, and IP Address Management (IPAM).
• Network Automation: Maintain network health by automating IP allocations and DNS entries.

Edge Architecture & WAN Edge

• SD-WAN Fabric: Design, deploy, and optimize SD-WAN solutions (Fortinet Secure SD-WAN or Palo Alto Prisma SD-WAN) to replace traditional MPLS.
• Traffic Steering: Define application-aware routing paths to guarantee performance for critical SaaS and cloud workloads.
• Hybrid Connectivity: Maintain secure Site-to-Site IPsec VPN overlays across the SD-WAN fabric.

Troubleshooting & Support

• Incident Response: Act as a Tier 2/3 escalation point for complex network security issues and outages.
• Packet Analysis: Use tools like Wireshark and built-in CLI packet captures to diagnose complex routing or traffic drops.
• Performance Tuning: Monitor firewall CPU, memory, and session counts to optimize throughput

Troubleshooting & Architecture

• Tier 3 Escalation: Diagnose complex outages involving multi-vendor paths (e.g., F5 VIP to Firewall to SD-WAN edge).
• Packet Diagnostics: Master packet capture tools (Wireshark, tcpdump) to resolve deep-layer routing, translation, or load-balancing issues.

At Zensar, we’re “experience-led everything”. We are committed to conceptualizing, designing, engineering, marketing, and managing digital solutions and experiences for over 130 leading enterprises. We are a company driven by a bold purpose: “Together, we shape experiences for better futures”. Whether for our clients, our people, or the world around us, this belief powers everything we do. At the heart of our culture is ONE with Client - a set of four core values that reflect who we are and how we work: One Zensar, Nurturing, Empowering, and Client Focus.

Part of the $4.8 billion RPG Group, we’re a community of 10,000+ innovators across 30+ global locations, including Milpitas, Seattle, Princeton, Cape Town, London, Zurich, Singapore, and Mexico City. Explore Life at Zensar and join us to Grow. Own. Achieve. Learn. to be the best version of yourself.

We believe the best work happens when individuality is celebrated, growth is encouraged, and well-being is prioritized. We are an equal employment opportunity (EEO) and affirmative action employer, committed to creating an inclusive workplace. All qualified applicants will be considered without regard to race, creed, color, ancestry, religion, sex, national origin, citizenship, age, sexual orientation, gender identity, disability, marital status, family medical leave status, or protected veteran status.