Systems Engineer

Shell; India; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Shell is seeking an experienced Palo Alto Firewall Operations Engineer to operate, secure, and optimize enterprise firewall infrastructure across on-prem and cloud environments. The role emphasizes automation, policy management, and ITSM alignment to maintain high availability and compliance.

The candidate will administer PA-Series/VM-Series, monitor health and logs, and collaborate with security and network teams to ensure secure connectivity and policy optimization.

Qualifications

• Bachelor's degree in CS/IT/Cybersecurity.
• 3-5 years hands-on with Palo Alto firewalls.
• Experience with Panorama in enterprise environments.
• Strong TCP/IP, routing, NAT, VPN skills.
• Knowledge of App-ID, User-ID, and Threat Prevention.

Responsibilities

• Administer and optimize Palo Alto PA-Series and VM-Series firewalls.
• Monitor firewall health, logs, and performance for reliability.
• Configure and maintain security policies and rules.
• Troubleshoot firewall, GlobalProtect, and config issues.
• Manage Panorama templates, device groups, and deployments.
• Enhance security with automation and policy optimization.
• Support ITSM processes and incident response.

Skills

Palo Alto firewalls

Panorama management

Automation

Python

PowerShell

IaC

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Terraform

GitHub

Job description

What's the role?

The Palo Alto Firewall Operations Engineer is responsible for operating, securing, and optimizing enterprise firewall infrastructure across on-prem and cloud environments. This role requires strong expertise in network security, firewall policy management, troubleshooting, automation, and ITSM operations, ensuring high availability and compliance with enterprise security standards.

What you'll be doing?

Palo Alto Firewall Operations

• Administer, maintain, and optimize Palo Alto Networks Next-Generation Firewalls (PA-Series, VM-Series) and Panorama management platform.
• Monitor firewall health, traffic logs, threat logs, and system performance to ensure operational stability and security.
• Configure, implement, update, and maintain firewall security policies and rules.
• Troubleshoot firewall, connectivity, GlobalProtect, security policy, and configuration-related issues.
• Manage Panorama templates, device groups, and configuration deployments across firewall environments.
• Ensure high availability (HA) configurations and failover readiness.
• Drive continuous improvements to reduce Mean Time to Resolution (MTTR) for firewall-related incidents.
• Maintain an optimized policy framework by identifying and removing redundant, obsolete, or unused rules.
• Enhance operational efficiency through automation of firewall management processes.

Network Security Management

• Implement and enforce security controls based on least-privilege access principles and application-aware security policies.
• Analyze network traffic patterns and application usage using App-ID, User-ID, and firewall logs.
• Manage security policies, URL filtering, threat prevention profiles, and GlobalProtect portals and gateways.
• Support SSL/TLS decryption, certificate lifecycle management, and secure communications.
• Collaborate with network, identity and access management (IAM), cloud, and security teams to ensure seamless connectivity and security.
• Monitor, investigate, and respond to security alerts, vulnerabilities, and incidents.
• Ensure firewall security services, including Threat Prevention, Antivirus, Anti-Spyware, and WildFire, remain current and effective.
• Support audit, compliance, and risk management requirements through reporting and security reviews.
• Assist with incident investigations and forensic analysis leveraging firewall logs and security telemetry.

Automation & Integration

• Utilize Palo Alto APIs and Panorama automation capabilities to streamline administrative processes.
• Manage firewall infrastructure using Infrastructure as Code (IaC) tools such as Terraform and GitHub.
• Develop automation solutions for rule lifecycle management, policy reviews, reporting, and operational workflows.
• Create and maintain scripts using Python and PowerShell to improve efficiency and consistency.
• Integrate firewall event and log data with SIEM platforms such as Microsoft Sentinel.
• Support automation of certificate renewals and SSL/TLS lifecycle management.

IT Service Management (ITSM)

• Manage incidents, service requests, and change activities in accordance with ITIL best practices.
• Perform incident triage, prioritization, troubleshooting, and Root Cause Analysis (RCA).
• Participate in change management reviews and risk assessments for firewall-related changes.
• Maintain accurate technical documentation, standard operating procedures (SOPs), and knowledge articles.
• Ensure compliance with service level agreements (SLAs), audit requirements, and operational standards.

Monitoring, Reporting & Continuous Improvement

• Monitor firewall performance, throughput, session utilization, and capacity metrics.
• Analyze policy usage, rule effectiveness, and rule hit counts to identify optimization opportunities.
• Generate and present reports on security posture, threat trends, compliance status, and policy optimization.
• Recommend and implement improvements to strengthen security, scalability, operational efficiency, and reliability.

What we need from you?

Technical Skills & Experience

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Network Engineering, or a related field.
• 3-5 years proven hands-on experience supporting Palo Alto Networks Next-Generation Firewalls (PA-Series and VM-Series).
• Experience administering and managing Palo Alto Panorama in enterprise environments.
• Strong understanding of TCP/IP networking, routing, NAT, VPN technologies (IPSec and SSL VPN), and network security concepts.
• Deep knowledge of Palo Alto security technologies, including App-ID, User-ID, URL filtering, Threat Prevention, and GlobalProtect.
• Experience managing SSL/TLS certificates, decryption policies, and certificate lifecycle processes.
• Strong understanding of firewall policy lifecycle management, governance, and compliance controls.
• Experience with automa