Palo Alto Firewall Network Engineer

Nsight Inc; Hyderabad; On-site; INR 2,800,000 - 5,000,000; Full time

Job summary

Nsight Inc. in Hyderabad, India, is seeking an experienced Firewall Security Engineer to design, implement, and manage next‑generation firewall architecture using Palo Alto networks. You will collaborate with IT, network, operations, and security teams to ensure secure connectivity across corporate and automation networks.

The role focuses on architecture design, deployment of NGFW features, policy management, and ongoing monitoring to maintain posture and compliance in enterprise environments.

Qualifications

• 8-10+ years of network/security engineering experience with Palo Alto NGFW.
• Strong knowledge of firewall technologies, segmentation, VPN, NAT, and best practices.
• Experience configuring Palo Alto NGFW features: rule base, URL filtering, SSL decryption, logging.
• Familiarity with auditing, compliance, and vulnerability management.

Responsibilities

• Design and architect firewall strategies using Palo Alto firewalls and related infra.
• Define segmentation, access controls, zone-based rules, VPNs, and traffic flows.
• Configure and deploy Palo Alto firewalls, including NAT, site-to-site and remote access VPNs.
• Manage rules, patching, upgrades, and perform policy audits.
• Collaborate with IT, security, and operations to align policies with business needs.

Skills

Palo Alto

NGFW features

VPN & NAT

Network Segmentation

Threat Prevention

SSL Decryption

Policy Management

Logging & Monitoring

Compliance & Audits

OT/Industrial networks

Troubleshooting

Job description

About the Role:

• We are seeking a skilled Firewall Security Engineer with deep expertise in Palo Alto Networks firewall solutions to design, implement, manage, and maintain next-generation firewall architecture.
• This engagement will collaborate with IT, network, operations, and security teams to ensure robust perimeter and internal security, compliance, segmentation, and secure connectivity across all corporate, automation, and operational networks.

Responsibilities:

Firewall Architecture & Design

• Design and architect firewall strategies using Palo Alto Networks firewalls and related security infrastructure.
• Define network segmentation, access control policies, zone-based firewall rules, VPNs, and traffic flows in line with security posture.
• Create and maintain security design documentation, network diagrams, policy templates, and configuration baselines.

Implementation & Configuration

• Configure and deploy Palo Alto firewalls (physical or virtual), including rulebase, NAT, VPNs (site-to-site, remote access), and advanced security features (IPS/IDS, URL filtering, threat prevention, SSL decryption, etc.).
• Implement and manage network segmentation, internal security zones, and micro-segmentation as needed for automation, robotics, production, and corporate networks.

Ongoing Management & Monitoring

• Manage firewall rule changes, policy updates, patching, firmware upgrades, and configuration audits.
• Monitor firewall activity, logs, and alerts; respond to security events, incidents, and abnormalities.
• Conduct security assessments, vulnerability analysis, and firewall policy reviews for compliance and best practices.

Collaboration & Security Governance

• Work closely with IT, cybersecurity, network, and operations teams to align firewall policies with business needs and compliance requirements.
• Assist with security incident response, forensic analysis, and remediation planning as required.
• Provide documentation, reporting, and knowledge transfer to internal staff; potentially assist with security awareness or best-practice guidance.

Qualifications

• 8-10+ years of experience in network/security engineering, with significant hands‑on experience in Palo Alto Networks firewall operations.
• Strong knowledge of firewall technologies, network segmentation, VPN, NAT, routing, and network security best practices.
• Experience configuring and managing Palo Alto NGFW features: rule base, NAT, VPNs, threat prevention, URL filtering, SSL decryption, logging, and alerting.
• Familiarity with security auditing, compliance, policy development, and vulnerability management.
• Experience working in enterprise environments, ideally spanning corporate, operational technology (OT), and automation/industrial networks.
• Strong analytical, troubleshooting, and communication skills.
• Security certification(s) (e.g., PCNSE) preferred but not required.