Senior Firewall & SSE Security Engineer

Elfonze Technologies; Bengaluru; On-site; INR 2,500,000 - 4,200,000; Full time

Job summary

Elfonze Technologies is seeking a senior network security engineer to lead firewall and SSE implementations across Palo Alto, Fortinet and Cisco platforms. You will design, configure and migrate enterprise firewall services, perform policy transformations and production cutovers with emphasis on security policy, NAT and segmentation.

Responsibilities include working with Panorama for centralized management, supporting SSE/Prisma Access and GlobalProtect, and delivering runbooks, test scripts and

Qualifications

• Experience with enterprise firewall design and migration.
• Ability to configure site-to-site VPNs, NAT and security policy updates.
• Knowledge of multi-vendor environments (Palo Alto, Fortinet, Cisco).
• Strong troubleshooting and change-control skills.

Responsibilities

• Design, configure, migrate and troubleshoot enterprise firewall services across Palo Alto, Fortinet and Cisco firewall platforms.
• Implement and support Palo Alto NGFW platforms including PA-5450 and PA-3220, with security zones, interfaces, routing, NAT, security policy and threat-prevention profiles.
• Configure and operate Panorama for centralized policy, object, template/device-group and firewall management.
• Support Fortinet FortiGate firewalls, including OT firewall requirements and industrial/segmented network use cases where applicable.
• Support legacy Cisco ASA and Cisco Firepower / Secure Firewall environments during migration and replacement activities, including VPN appliance functions where present.
• Support Palo Alto SSE / Prisma Access / GlobalProtect components for remote-user and secure-access connectivity.
• Build and migrate firewall policies, NAT/PAT rules, objects, zones and network segmentation controls.
• Configure and troubleshoot site-to-site IPsec VPNs, remote-access dependencies, routing through firewalls and failover/high-availability behavior.
• Perform rule-base analysis, cleanup, optimization and validation while maintaining business connectivity and change-control requirements.

Skills

Palo Alto NGFW

Panorama

SSL/TLS inspection

VPN/IPSec

Threat prevention

Tools

PAN-OS

GlobalProtect

Prisma Access

FortiGate

Firepower

Job description

Certification Firewall / network-security certification required

Primary Focus Palo Alto NGFW/Panorama/SSE, Fortinet and Cisco ASA/Firepower

Role Summary

Senior network security engineer responsible for firewall and Secure Service Edge implementation, migration, policy transformation and production cutover across Palo Alto Networks, Fortinet and Cisco technologies.

Key Responsibilities / Implementation Scope

• Design, configure, migrate and troubleshoot enterprise firewall services across Palo Alto Networks, Fortinet and Cisco firewall platforms.
• Implement and support Palo Alto Networks NGFW platforms including PA-5450 and PA-3220, with security zones, interfaces, routing, NAT, security policy and threat-prevention profiles.
• Configure and operate Panorama for centralized policy, object, template/device-group and firewall management.
• Support Fortinet FortiGate firewalls, including OT firewall requirements and industrial/segmented network use cases where applicable.
• Support legacy Cisco ASA and Cisco Firepower / Secure Firewall environments during migration and replacement activities, including VPN appliance functions where present.
• Support Palo Alto SSE / Prisma Access / GlobalProtect components where required for remote-user and secure-access connectivity.
• Build and migrate firewall policies, NAT/PAT rules, objects, zones, security profiles and networksegmentation controls.
• Configure and troubleshoot site-to-site IPsec VPNs, remote-access dependencies, routing through firewalls and failover/high-availability behavior.
• Perform rule-base analysis, cleanup, optimization and validation while maintaining business connectivity and change-control requirements.

analysis.

• Execute firewall cutovers/migrations with pre-checks, validation, rollback support, issue resolution and
• Prepare implementation runbooks, policy migration workbooks, test scripts, rollback plans and as-built documentation.

Required Technical Skills

Area Required Hands-on Experience

• Palo Alto NGFW PA-5450, PA-3220, PAN-OS, zones, interfaces, routing, NAT, security policy,threat prevention and SSL/TLS inspection.
• Panorama Centralized firewall management, device groups, templates/template stacks, objects, policy deployment and operational troubleshooting.
• Palo Alto SSE / Remote Access Palo Alto SSE, Prisma Access and GlobalProtect architecture/operations whescope.
• Fortinet FortiGate policy, routing, NAT, VPN, segmentation and OT firewall use cases
• Cisco Firewall Cisco ASA and Cisco Firepower / Secure Firewall; legacy support, migration appliance functions.
• VPN / Segmentation IPsec VPN, remote-access dependencies, network segmentation, zone-baseand high-availability/failover concepts.
• Troubleshooting / Migration Session analysis, logs, packet capture, NAT/routing analysis, rule-base cleanvendor firewall migration and production cutover.

Certification Requirements

Mandatory: At least one relevant firewall/network-security certification is required (for example PCNSE, Cisco CCNP Security, or an appropriate current Fortinet professional-level credential).

Preferred / Advantageous: Additional Palo Alto, Cisco Secure Firewall/Firepower or Fortinet specialist certifications and multi-vendor firewall migration experience.

• Firewall policy/NAT/object migration workbook
• Implementation runbooks and MOPs
• Firewall/SSE cutover and rollback plans
• Connectivity, security-policy and failover test scripts
• As-built configuration, rule-base documentation and operational handover