Network Engineer

HCLTech; Quincy (MA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) retirement plan

Paid time off

10 paid holidays per year

Job summary

HCLTech is seeking a senior Network Security Engineer to design, implement, and manage advanced security architectures leveraging Palo Alto Networks and Zscaler. The role demands deep expertise in App-ID, User-ID, Content-ID, Decryption, AI-Ops, and high-availability configurations.

You will analyze complex security events, perform root-cause investigations, and collaborate across teams to deliver robust defense-in-depth solutions.

Qualifications

• Minimum 8 years in network security with Palo Alto and Zscaler.
• Deep knowledge of Palo Alto features including App-ID, User-ID, Content-ID, Decryption, and AI-Ops.
• Proven ability to design, implement, and manage complex network security solutions.
• Strong analytical, problem-solving, and decision-making skills.
• Excellent communication and teamwork abilities.
• Bachelor's or master's degree in computer science or information security.
• Relevant Palo Alto and Zscaler certifications are highly valued.

Responsibilities

• Design, implement, and manage complex network security solutions.
• Maintain expertise across Palo Alto firewalls and Zscaler (ZIA & ZPA) in HA mode.
• Troubleshoot and resolve advanced security issues and incidents.
• Collaborate with teams and lead technology upgrade programs.

Skills

Network security

Palo Alto Networks

Zscaler

App-ID

User-ID

Content-ID

Decryption

AI-Ops

Firewall management

Troubleshooting

OSPF/BGP

IPsec VPNs

Packet capture

Root cause analysis

Communication

Education

Bachelor's or Master's in CS/InfoSec

Tools

Palo Alto Networks

Zscaler

ZIA

ZPA

F5 load balancers

IPS

DNS

SSL/TLS

Job description

A minimum of 8 years of experience in network security, with extensive expertise in Palo Alto Networks & Zscaler technologies.

In-depth knowledge of Palo Alto Networks features including App-ID, User-ID, Content-ID, Decryption, and AI-Ops.

Proven ability to design, implement, and manage complex network security solutions.

Strong analytical, problem-solving, and decision-making skills.

Excellent communication skills, with the ability to collaborate effectively in a team environment.

Bachelor's or master's degree in computer science, Information Security, or a related field.

Relevant network security certifications, especially those related to Palo Alto Networks, and Zscaler are highly valued.

• Level 2/3 Network Security Engineer
• Deep and strong understanding of firewall (Layer-2 and Layer-3), Internet proxy, DNS, SSL, VPN, multi-factor authentication, and IPS technologies.
• Ability to implement and support complex security architectures involving but not limited to the above listed technologies.
• Strong experience on Palo Alto Network firewalls
• Very strong hands-on experience on implementation and advanced troubleshooting in Palo Alto firewalls & Zscaler (ZIA & ZPA) in High-availability mode.
• Extensive exposure on Zscaler proxies and Private access involving complex traffic troubleshooting.
• Understanding of commonly used protocols and services (e.g. SSL, TCP/UDP, HTTP, FTP/SFTP, NTP, Telnet, NFS, SSH, LDAP, etc.)
• Good understanding of routing technologies including OSPF, BGP, GRE Tunnel and IPSEC VPNs with the ability to design and troubleshoot complex enterprise network infrastructure.
• Good understanding of Remote Access products with 2-factor authentication systems.
• Good conceptual understanding of Switching & F5 load balancers.
• Expertise on packet capturing and deep packet analysis
• Experience working on process-oriented organizations involving incident, change, problem and configuration management processes.
• Ability to analyze problems and perform Root Cause Analyses as and when required.
• Project reviews, project meetings and project delivery, Leading Technology upgrade programs.
• Candidates need to have Level 2/3 experience with Firewall Setup and support in enterprise/large corporate environment in current or most recent position.

Certification: -

The Palo Alto Networks Certified Network Security Engineer (PCNSE)

OR

Disclaimer

HCL is an equal opportunity employer, committed to providing equal employment opportunities to all applicants and employees regardless of race, religion, sex, color, age, national origin, pregnancy, sexual orientation, physical disability or genetic information, military or veteran status, or any other protected classification, in accordance with federal, state, and/or local law. Should any applicant have concerns about discrimination in the hiring process, they should provide a detailed report of those concerns to [e-mail] for investigation.

Compensation and Benefits

A candidate’s pay within the range will depend on their work location, skills, experience, education, and other factors permitted by law. This role may also be eligible for performance-based bonuses subject to company policies. In addition, this role is eligible for the following benefits subject to company policies: medical, dental, vision, pharmacy, life, accidental death & dismemberment, and disability insurance; employee assistance program; 401(k) retirement plan; 10 days of paid time off per year (some positions are eligible for need-based leave with no designated number of leave days per year); and 10 paid holidays per year.