Senior Network Security Engineer / Security Architect

Sb Hr Consultancy Kolkata; Dadri, Greater Noida; On-site; INR 900,000 - 1,300,000; Full time

Job summary

Sb Hr Consultancy Kolkata seeks a security-focused engineer to install, configure, and operate high-end firewall appliances from Palo Alto, Cisco ASA, Check Point, Fortinet, and Zscaler. The role emphasizes automating policy lifecycles, threat awareness, and enterprise security support across development, test, and production environments.

The ideal candidate will have hands-on experience with firewall platforms, networking fundamentals, and security best practices, enabling effective policy

Qualifications

• Detailed technical experience in the installation, configuration, and operation of high-end firewall appliances, ideally Palo Alto Networks, cisco FTD, checkpoint, Zscaler and fortinet products.
• Research, evaluate, develop, and implement security solutions and standards following industry best practices.
• Design, develop, and maintain automation frameworks for firewall policy life cycle management including rule creation, modification, review, cleanup, and compliance validation.

Responsibilities

• Detailed technical experience in installation, configuration, and operation of high-end firewall appliances.
• Work with other teams to design, develop, and implement Enterprise Security solutions in support of development, test, and production environments.
• Automate security policy deployment and enforcement across multi-vendor firewall platforms using APIs, SDKs, and infrastructure-as-code tooling.
• Strong working knowledge of Network Security concepts and technologies: Building and maintaining network security devices for WAN, LAN, VPN, and WiFi.
• Intrusion detection and prevention systems (IDS/IPS).

Skills

TCP/IP

Networking

IDS/IPS

Automation

Tools

Palo Alto Networks

Cisco ASA

Check Point

Fortinet

Zscaler

Job description

Role & responsibilities

• Detailed technical experience in the installation, configuration, and operation of high-end firewall appliances, ideally Palo Alto Networks, cisco FTD, checkpoint, Zscaler and fortinet products.
• Strong understanding of core Internet protocols, TCP/IP, computer networking, routing, and switching protocols, Network packet inspection and forensics.
• Experience with Cisco Routers, Switches, AAA, and TACACS.
• Research, evaluate, develop, and implement security solutions and standards following industry best practices.
• Work with other teams to design, develop, and implement Enterprise Security solutions in support of development, test, and production environments.
• Provide technical security expertise and assistance to other IT and business groups.
• Perform security audits and testing; evaluate system security configurations to ensure efficacy and compliance with policies and procedures.
• Design, develop, and maintain automation frameworks for firewall policy life cycle management including rule creation, modification, review, cleanup, and compliance validation.
• Automate security policy deployment and enforcement across multi-vendor firewall platforms (Palo Alto, Cisco ASA, Checkpoint, Fortinet) using APIs, SDKs, and infrastructure-as-code tooling.
• Strong understanding of current security threats, techniques, and the threat landscape; self-driven desire to research current and emerging threats.
• Conceptual and practical understanding of IT Infrastructure designs, technologies, products, and services, including applicable Information Security concepts.
• Ability to work both in a group setting and independently.
• Experience with IT ticketing systems.
• Strong working knowledge of Network Security concepts and technologies: Building and maintaining network security devices for WAN, LAN, VPN, and WiFi.
• Intrusion detection and prevention systems (IDS/IPS).
• TCP/IP, computer networking, routing, and switching protocols.
• DNS, Internet policy enforcement, web content filtering.

Preferred candidate profile

• Palo Alto Networks (PCNSE)
• Cisco ASA / CCNP Security
• Checkpoint (CCSE)
• Zscaler certified Professional
• Certified Information Systems Security Professional (CISSP)
• SANS GIAC certifications (GCIA, GCFW, GPEN, or similar)
• AWS/Azure/GCP Security Specialty (cloud security automation)
• Palo Alto XSOAR Engineer or similar SOAR platform certification