Sr. Engineer - Security Engineering

CBTS; Chennai; On-site; INR 1,000,000 - 1,500,000; Full time

Job summary

CBTS is seeking a Security Architect to develop and implement security frameworks and optimize firewall performance to ensure compliance with industry standards. The role requires in-depth knowledge of Palo Alto firewalls, incident response strategies, and experience working within large enterprise environments in Chennai, Tamil Nadu, India. The ideal candidate will have a Bachelor's degree in a relevant field and certifications in Palo Alto. The position may require late hours or weekends to complete projects.

Qualifications

• Develop and implement robust security architectures to protect infrastructure and applications.
• Optimize firewall performance for high availability and scalability.
• Investigate and respond to security incidents related to firewall breaches.

Responsibilities

• Create and enforce firewall policies and access control rules.
• Maintain comprehensive documentation for security procedures.
• Ensure compliance with industry standards and regulations.

Skills

Security Architecture and Design

Incident Response

Policy and Rule Management

Compliance

In-depth Routing Protocols experience

Education

4-year Bachelor's Degree in Computer Science, Information Systems or Engineering

Tools

Palo Alto

Cisco LAN and WAN

Job description

About this position

CBTS serves enterprise and midmarket clients in all industries across the United States and Canada. CBTS combines deep technical expertise with a full suite of flexible technology solutions--including Application Modernization, Managed Hybrid Cloud, Cybersecurity, Unified Communications, and Infrastructure solutions. From developing and deploying modern applications and the secure, scalable platforms on which they run, to managing, monitoring, and optimizing their operations, CBTS delivers comprehensive technology solutions for its clients' transformative business initiatives. For more information, please visit www.cbts.com.

OnX is a leading technology solution provider that serves businesses, healthcare organizations, and government agencies across Canada. OnX combines deep technical expertise with a full suite of flexible technology solutions—including Generative AI, Application Modernization, Managed Hybrid Cloud, Cybersecurity, Unified Communications, and Infrastructure solutions. From developing and deploying modern applications and the secure, scalable platforms on which they run, to managing, monitoring, and optimizing their operations, OnX delivers comprehensive technology solutions for its clients’ transformative business initiatives. For more information, please visit www.onx.com.

Job Description:

• Security Architecture and Design: Develop and implement robust security architectures and frameworks to protect our infrastructure and applications.
• Performance Tuning: Optimize firewall performance, ensuring high availability, scalability, and minimal impact on network traffic.
• Incident Response: Investigate and respond to security incidents related to firewall breaches, performing root cause analysis and remediation.
• Policy and Rule Management: Create and enforce firewall policies and access control rules, regularly reviewing and updating them to address new threats and changes in network topology.
• Security Best Practices: Advocate for and enforce security best practices across all stages of the development lifecycle.
• Collaboration: Work closely with development teams to integrate security features and practices into new and existing applications and systems.
• Documentation and Reporting: Maintain comprehensive documentation for security procedures, incidents, and system configurations. Provide regular reports and updates to stakeholders.
• Compliance: Ensure that security practices comply with industry standards, regulations, and company policies.
• Review scripting, planning and execution of Firewall (Palo Alto) Change Management process.
• Investigate firewall issues / incidents and bring to resolution within stated SLA parameters.
• Working with Incident, Problem, and Change Management.
• Provide Root Cause Analysis (RCA) to operations team and customers upon request.
• Provide technical leadership (both verbal and written) for Incident and Change – firewall related.
• Able to work on network drawings with Visio.
• Work and collaborate with other app teams.
• Good understanding of BGP / EIRGP routing, NAT/PAT, VPN, and firewall technologies.

Education:
4-year Bachelor's Degree or equivalent experience, preferably in Computer Science, Information Systems or Engineering (or) Three years of College or Technical School resulting in an Associate’s Degree or equivalent.

Accreditation / Certification / Licenses:

• Required Certifications or equivalent experience: Palo Alto Certifications.
• CCNA Enterprise Route/Switch Other Security Certification.

Previous Job Experience:

• Network or Firewall build and engineering experience and expertise in a variety of predominantly in Palo Alto firewalls, Panaroma, PRISMA cloud, Cisco LAN and WAN in large, complex, enterprise environment.
• Experience implementing/managing firewall rules, policies, PAN-OS upgrades etc.,
• Experience using network analysis, management, and performance monitoring tools to plan for growth, diagnose problems and determine source.
• Working on comprehensive projects in complex networking / VPN environment with IPSEC, Meet Me and NAT.

Special Knowledge / Skills / Abilities:

• Time Management / Self-Management
• In-depth Routing Protocols experience and operational knowledge: EIGRP & BGP
• Some example platforms in the environment include SDWAN, Palo Alto with virtual firewall contexts / vsys, Nexus 7K/5K/2K, Cisco ASR/ISR routers, and Cisco Catalyst switches
• Familiarity with ITIL based ticketing solution (Service NOW experience a plus)
• In-depth knowledge of the configuration and maintenance of routers, switches, and firewalls
• Partial US EST hours
• May require late hours and weekends to complete assignments and projects.