Senior Network Security Engineer

Virtual Tech Gurus India Pvt Ltd; Coimbatore District; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Virtual Tech Gurus India Pvt Ltd in Coimbatore is seeking an experienced L3/L4 Network & Security Engineer to lead end-to-end network and firewall projects, including routing, switching, implementation, troubleshooting and migrations.

The role requires hands-on Palo Alto firewall expertise (Panorama a plus), multi-site migration experience, strong vendor-agnostic troubleshooting, and ability to work directly with customers on design, deployment and post-migration validation.

Qualifications

• Hands-on experience with Palo Alto firewalls and Panorama.

Responsibilities

• Palo Alto: manage firewall configs, policies, NAT, VPN, and logging.

Skills

End-to-end network management

Firewall administration

Hands-on troubleshooting

Customer-facing

Tools

Palo Alto

Panorama

Cisco Firepower/FTD

Fortinet FortiGate

Sophos

Job description

We are looking for a highly experienced L3/L4 Network & Security Engineer with strong hands-on experience in Routing, Switching, Enterprise Firewalls, Network Implementation, Troubleshooting and Migration Projects.

The candidate must be able to independently handle end-to-end network and firewall activities, including configuration, implementation, troubleshooting, upgrades, replacement and migration.

Key responsibilities

• Palo Alto: Primary firewall technology and mandatory hands-on expertise. Cisco Firepower/FTD, Sophos and FortiGate are secondary firewall technologies.
• Palo Alto Panorama: Administration, configuration, centralized policy management, monitoring, troubleshooting and validation.
• Routers: Configuration, troubleshooting, upgrades, replacement and migration.
• Switches: Access, Distribution, Core and Data Center switching; configuration, troubleshooting, upgrades, replacement and migration.
• Routing: BGP, OSPF, EIGRP, Static Routing, PBR, VRF, route redistribution and route filtering.
• Switching: VLAN, trunking, STP/RSTP/MSTP, LACP/EtherChannel, HSRP/VRRP and VPC/MLAG.
• Firewall Configuration: Security policies, NAT, routing, VPN, HA, security profiles, objects, zones and logging.
• Firewall Migration: End-to-end migration from one firewall vendor/platform to another, including discovery, assessment, policy conversion/mapping, object migration, NAT, routing, VPN, testing, cutover, rollback and post-migration troubleshooting.
• Multi-Site Firewall Migration: Experience supporting or leading multi-site firewall migration and deployment activities, including site-wise planning, cutover, validation, rollback and post-cutover stabilization.
• Network Migration: Core, Distribution, WAN, Internet Edge and Data Center migrations, including IP, VLAN and routing migrations.
• Implementation: Greenfield and existing-environment deployments, including end-to-end implementation, testing and validation.
• Troubleshooting: Device-level, protocol-level, packet-level and end-to-end application connectivity troubleshooting across network and firewall infrastructure.
• Major Incidents: P1/P2 incident troubleshooting, resolution, escalation management and Root Cause Analysis (RCA).
• Network & Firewall Optimization: Network performance, routing, firewall rules, HA, capacity and architecture optimization.
• SOW & Technical Validation: Ability to technically review and validate the SOW, proposed solution, HLD/LLD, implementation approach, dependencies, risks and technical requirements.
• Design Review: Review network and firewall designs and provide technical recommendations before implementation or migration.
• Migration Planning & Cutover: Develop and review migration plans, MOPs, test plans and rollback procedures; support planned production cutovers, including night/weekend maintenance windows when required.
• Post-Migration Stabilization: Perform post-cutover validation, troubleshooting, issue resolution and stabilization of the network and firewall environment.
• Customer-Facing Activities: Work directly with customers, technical stakeholders and project teams for requirements, design discussions, technical reviews, migration planning, implementation and issue resolution.

Knowledge Transfer: Conduct knowledge-transfer sessions and provide technical handover