Senior Security Engineer (Palo Alto Network)

Careernet; Hyderabad; Hybrid; INR 2,800,000 - 4,200,000; Full time

Job summary

Careernet is seeking an experienced Senior Security Engineer (Palo Alto) to design, implement, and support our enterprise firewall and network security infrastructure across Palo Alto Networks solutions.

The role requires 7+ years hands-on experience with Palo Alto firewalls via Panorama/SCM, strong networking fundamentals, and excellent problem-solving skills, with opportunities for growth into senior security roles.

Qualifications

• 7+ years hands-on experience administering Palo Alto Networks firewalls via Panorama and SCM.
• Strong networking fundamentals: TCP/IP, routing, switching, VLANs, DNS, DHCP, and segmentation concepts.
• Configuring security zones, security/NAT policies, App-ID, User-ID, SSL decryption, and threat prevention profiles.
• Experience with VPN technologies (IPSec site-to-site, Global Protect remote access).
• Analytical, troubleshooting and problem-solving skills under pressure.
• Understanding of least-privilege and defense-in-depth security principles.
• Ability to work independently and with cross-functional teams.
• Experience with Prisma Access / SASE and cloud-delivered security architecture.
• Knowledge of core security concepts (CIA triad, threats, patch management, NIST).
• Excellent communication and ability to translate risk to non-technical stakeholders.

Responsibilities

• Design, configure, deploy, and maintain Palo Alto NGFWs using Panorama/SCM.
• Develop, review, and optimize firewall policies, NAT rules, App-ID/User-ID/Content-ID configurations, and security profiles.
• Maintain firewall rule base hygiene with periodic reviews and change records.
• Monitor firewall health, performance and logs via Panorama/SCM/SIEM integrations to identify anomalies.
• Troubleshoot complex network/security issues across LAN/WAN/VPN and cloud connectivity (Prisma Access/SASE).
• Support upgrades, patching, HA configuration, failover testing, and disaster recovery planning.
• Collaborate with cross-functional teams on architecture, segmentation and Zero Trust initiatives.
• Participate in incident response with log analysis and containment actions.
• On-Call rotation to support P1/P2 incidents outside business hours.
• Maintain network diagrams, firewall configurations, SOPs, and change records.
• Ensure compliance with internal policies and frameworks (HIPAA/NIST/PCI-DSS as applicable).
• Evaluate new Palo Alto features/releases and recommend adoption for security/efficiency.
• Provide Tier 2/3 escalation support and mentor junior engineers on firewall practices.

Skills

Palo Alto Firewall

Panorama

Strata Cloud Manager

Networking

App-ID

User-ID

Content-ID

VPN (IPSec)

Threat Prevention

Log Analysis

Zero Trust

Troubleshooting

Prisma Access

NIST

Communication

Incident Response

Tools

GlobalProtect

Job description

Position Overview

We are seeking an experienced Senior Security Engineer Palo Alto Network to design, implement, and support our enterprise firewall and network security infrastructure across Palo Alto Networks Solution. The ideal candidate has 7+ years of hands-on experience managing Palo Alto Networks firewalls through Panorama and/or Strata Cloud Manager (SCM), a strong foundation in networking and core cybersecurity concepts, and excellent troubleshooting and problem-solving skills. This role is critical to maintaining the security posture, availability, and performance of our network environment, and offers a clear growth path toward Senior Security Engineer or Senior Network Security Engineer.

Key Responsibilities

• Design, configure, deploy, and maintain Palo Alto Networks next-generation firewalls (NGFWs) using Panorama and/or Strata Cloud Manager (SCM).
• Develop, review, and optimize firewall security policies, NAT rules, App-ID/User-ID/Content-ID configurations, and security profiles.
• Manage firewall rule base hygiene, including periodic rule reviews, clean-up of unused/overly permissive rules, and change control documentation.
• Monitor firewall health, performance, and log data (via Panorama, SCM, or SIEM integration) to proactively identify anomalies and security incidents.
• Troubleshoot complex network and security issues across LAN, WAN, VPN (site-to-site and remote access), and cloud connectivity (Prisma Access/SASE).
• Support firewall upgrades, patching, HA pair configuration/failover testing, and disaster recovery planning.
• Collaborate with network, security operations, and infrastructure teams on architecture design, segmentation strategy, and Zero Trust initiatives.
• Participate in incident response activities, providing firewall log analysis and containment actions as needed.
• Participate in an On-Call rotation to support P1/P2 firewall and network security incidents outside of business hours.
• Maintain accurate documentation of network diagrams, firewall configurations, standard operating procedures (SOPs), and change records.
• Ensure compliance with internal security policies and relevant regulatory/industry frameworks (e.g., HIPAA, NIST, PCI-DSS as applicable).
• Evaluate new Palo Alto features/releases and recommend adoption where it improves security posture or operational efficiency.
• Provide Tier 2/3 escalation support and mentor junior team members on firewall and networking best practices.

Required Qualifications

• 7+ years of hands-on experience administering Palo Alto Networks firewalls via Panorama and/or Strata Cloud Manager (SCM).
• Strong foundational networking knowledge: TCP/IP, routing (static/OSPF/BGP), switching, VLANs, DNS, DHCP, and network segmentation concepts.
• Proven experience configuring security zones, security/NAT policies, App-ID, User-ID, SSL decryption, and threat prevention profiles.
• Experience with VPN technologies (IPSec site-to-site, Global Protect remote access).
• Strong analytical, troubleshooting, and problem-solving skills; able to diagnose and resolve complex network/security issues under pressure.
• Solid understanding of network security best practices, including least-privilege access and defense-in-depth principles.
• Ability to work both independently and collaboratively across cross-functional IT and security teams.
• Experience with Prisma Access / SASE and cloud-delivered security architecture.
• Basic working knowledge of core security engineering and cybersecurity concepts (e.g., defense-in-depth, CIA triad, common attack techniques, vulnerability and patch management, and security frameworks such as NIST).
• Excellent written and verbal communication skills, including the ability to translate technical risk into business terms for non-technical stakeholders.