Palo Alto Security Engineer

Knotify Services; Pune District, Chennai, Bengaluru; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

Knotify Services in India is seeking an experienced Senior Security Engineer / Technical Lead with deep Palo Alto SSE and Prisma Access expertise to lead enterprise cloud security initiatives, remote-access transformations, and secure internet access deployments.

You will blend hands-on engineering with technical leadership, involved in solution design, implementation, governance, and mentoring across teams.

Qualifications

• 7+ years in network/security, with hands-on Palo Alto SSE and Prisma Access.
• 3+ years deploying Prisma Access in large enterprise environments.
• Strong knowledge of SSE/SASE, ZTNA, and web gateway platforms.

Responsibilities

• Lead design, deployment, administration, and optimization of Palo Alto SSE and Prisma Access.
• Architect secure internet and private app access for enterprise users globally.
• Coordinate migrations from legacy remote-access VPN and proxies to Prisma Access.
• Provide L3/L4 escalation support and drive incident resolution.

Skills

Palo Alto SSE

Prisma Access

GlobalProtect

ZTNA

Tools

Forcepoint Web Security

Cisco Secure Web Appliance

ProxySG

Job description

JOB DESCRIPTION
Senior Security Engineer / Technical Lead (Band B3 and C1)
Palo Alto SSE & Prisma Access
Experience6 to 15+ yearsPrimary skillPalo Alto SSE and Prisma AccessSecondary skillEnterprise Secure Web Gateway (SWG) and proxy securityRole levelSenior Security Engineer / Technical LeadLocationBangalore / Hyderabad / Pune / Chennai / NoidaEmployment typeFull-time
Role Summary
We are seeking an experienced Senior Security Engineer / Technical Lead with strong expertise in Palo Alto Security Service Edge (SSE) and Prisma Access to lead enterprise cloud security initiatives, remote-access transformation programmes, and secure internet access deployments.
The role combines hands-on engineering with technical leadership and includes solution design, implementation, administration, troubleshooting, optimization, governance, customer engagement, and mentoring. The successful candidate should also have practical experience with Enterprise Secure Web Gateway (SWG) and proxy security platforms used for web filtering, SSL inspection, malware protection, and policy enforcement.

Key Responsibilities

Palo Alto SSE and Prisma Access

• Lead the design, deployment, administration, and optimization of Palo Alto SSE and Prisma Access environments.
• Architect secure internet and private application access solutions for enterprise users, branch locations, and the remote workforce.
• Implement and manage Prisma Access Remote Networks, Mobile Users, Service Connections, Cloud Secure Web Gateway, Explicit Proxy, browser security controls, SaaS security policies, Zero Trust Network Access (ZTNA), and enterprise DLP integrations.
• Configure and troubleshoot GlobalProtect, URL Filtering, DNS Security, SSL/TLS decryption, App-ID, User-ID, Device-ID, HIP profiles, authentication integrations, and security policy controls.
• Integrate Prisma Access with SAML, Microsoft Entra ID, Active Directory, multifactor authentication, and certificate-based authentication.
• Monitor platform health, capacity, security events, and traffic logs; identify risks, performance concerns, and policy issues, and implement corrective actions.
• Ensure the availability, resilience, and operational stability of cloud-delivered security controls.

Migration, Implementation, and Transformation

• Lead migrations from legacy remote-access VPN and enterprise proxy environments to Prisma Access, including discovery, dependency assessment, solution design, testing, cutover, and rollback planning.
• Prepare high-level and low-level designs, implementation plans, methods of procedure, change records, validation checklists, and operational handover documentation.
• Coordinate application testing, user acceptance testing, and production-readiness activities with Network, Cloud, IAM, Endpoint, SOC, and business application teams.
• Drive the adoption of enterprise SSE, SASE, and Zero Trust architectures while ensuring that solutions remain secure, scalable, and supportable.

Enterprise Secure Web Gateway and Proxy Security

• Design, administer, and support Enterprise Secure Web Gateway and proxy security platforms such as Forcepoint Web Security, Cisco IronPort Web Security Appliance / Cisco Secure Web Appliance, Broadcom Symantec ProxySG, McAfee Web Gateway, or an equivalent enterprise platform.
• Configure web filtering, URL categorization, application controls, proxy authentication, malware protection, SSL inspection, DLP integrations, certificate trust settings, and web access policies.
• Manage PAC files, explicit and transparent proxy configurations, proxy bypass rules, forwarding policies, and authentication exceptions.
• Troubleshoot browsing failures, authentication loops, certificate warnings, blocked applications, policy conflicts, and web performance issues using platform logs and packet-level analysis.
• Tune web security policies to reduce false positives, remove obsolete rules and exceptions, and maintain an effective security posture.

Security Architecture and Governance

• Participate in security architecture reviews, technical workshops, and risk assessments.
• Define security standards, implementation guidelines, operational procedures, and support requirements.
• Review cloud security, proxy, and access-control policies against approved enterprise security baselines.
• Ensure that designs and production changes comply with security standards, naming conventions, policy governance, and change-management requirements.
• Support audits, control assessments, policy reviews, and compliance evidence collection.

Operations and Incident Management

• Provide L3/L4 escalation support for security policy, authentication, certificate, SSL decryption, and performance issues.
• Lead P1/P2 incident resolution, stakeholder communication, root-cause analysis, and corrective and preventive action planning.
• Manage production changes and review implementation plans, validation steps, and rollback procedures.
• Maintain SOPs, operational runbooks, troubleshooting guides, knowledge articles, and technical handover documentation.
• Identify opportunities for service improvement, automation, risk reduction, and operational efficiency.

Required Experience and Skills

• 7+ years of experience in network security, cloud security, or web security, including strong hands-on experience in Palo Alto environments.
• A minimum of 3 years of practical experience deploying and supporting Palo Alto Prisma Access in a large enterprise environment.
• Strong knowledge of Palo Alto SSE, Prisma Access, GlobalProtect, Remote Networks, Mobile Users, Service Connections, Explicit Proxy, App-ID, User-ID, Device-ID, URL Filtering, DNS Security, and SSL/TLS decryption.
• Good understanding of SSE/SASE architecture, Zero Trust principles, identity-based access, secure internet access, and private application access.
• Hands-on experience with at least one Enterprise Secure Web Gateway or proxy security platform, such as Forcepoint Web Security, Cisco IronPort / Secure Web Appliance, Broadcom Symantec ProxySG, or McAfee Web Gateway.
• Practical experience with web filtering, proxy authentication, PAC files, explicit or transparent proxy, SSL inspection, malware controls, and web policy troubleshooting.
• Strong troubleshooting, technical documentation, stakeholder management, and customer-facing communication skills.

Leadership Expectations

• Act as the technical lead for Palo Alto SSE and Prisma Access initiatives.
• Lead customer discussions, discovery workshops, architecture reviews, and technical design sessions.
• Mentor engineers and provide technical guidance during complex implementations, changes, and production incidents.
• Review and approve solution designs, implementation plans, change procedures, and operational handover materials.
• Drive continuous improvement, automation, technical governance, and capability development within the team.
• Take ownership of solution quality, production readiness, critical escalations, and stakeholder communication.

Preferred Qualifications

• Experience supporting large, distributed, and globally connected enterprise environments.
• Experience leading security transformation, cloud migration, platform migration, and policy-rationalization initiatives.
• Experience working within ITIL-based incident, change, and problem management processes.
• Palo Alto Networks certification such as PCNSE or a relevant Prisma Access / SSE certification.
• Additional certifications such as CCNP Security, CISSP, CISM, Microsoft Azure Security Engineer Associate, or ITIL Foundation are advantageous.

Senior Security Engineer - Palo Alto SSE / Prisma Access | 1