Security consultant

HCL Technologies Limited; United States; On-site; USD 90,000 - 130,000; Full time

Job summary

Sapsf is seeking a Security Consultant for advanced firewall and security operations in the United States. The role covers hands-on work with Palo Alto, Cisco technologies, and ISE for VPNs and authentication, along with incident response and risk analysis.

The candidate should have strong experience in Firewalls, VPNs, DLP, RSA SecurID, and ITIL processes, with on-call rotation expectations and collaboration across COE and customer teams.

Qualifications

• Hands-on experience with Palo Alto, Panorama, Cisco FTD, Cisco ASA and Cisco ISE.
• Deep understanding of Palo Alto Firewall concepts and features.
• Experience with Cisco ISE for VPN authentication, AAA and policy creation.
• Knowledge of routing protocols and security incident handling.
• Familiarity with Symantec DLP and end point security solutions.
• Broad experience across Firewalls, VPNs, IDS/IPS, RSA SecurID, and ITIL processes.

Responsibilities

• Configure Cisco and Palo Alto firewalls and manage access controls.
• Articulate risks and dependencies during reviews.
• Participate in on-call rotation and support.
• Audit firewall configurations and update ACLs as needed.
• Coordinate with multiple teams to manage log management solutions.
• Deliver high-quality, compliant security configurations per regulations.

Skills

Palo Alto

Panorama

Cisco FTD

Cisco ASA

Cisco ISE

Security Zones

Policy ordering

Audit logs

VPN authentication

AAA

Routing protocols

Security Incidents

DLP

Firewalls

VPNs

IDS/IPS

Endpoint security

RSA SecurID

Content Security Gateways

TACACS/AAA

ITIL processes

F5 load balancers

Presentation skills

Risk analysis

Tools

Cisco devices

Security platforms

Job description

Career Opportunities: Security consultant (146416)

Requisition ID146416-Posted10/16/2026

Technical skill set

• Good hands-on experience in Palo Alto, Panorama, Cisco FTD, Cisco ASA, and Cisco ISE.
• Full understanding of Palo Alto Firewall concepts like Security Zones, Security policy ordering, Searching and Sorting Audit logs, Address Sets, negated addresses, User Roles and tables, route-based policies, address-books, Application traffic control etc.
• Must have hand on Cisco ISE for VPN authentication, AAA, policy creation.
• Understanding and experience with routing protocols
• Handson Skill on handling Security Incidents and plan mitigation.
• Good understanding of Symantec DLP
• Should have good understanding and extensive hands-on experience on various security technologies including Firewalls, VPN\'s, IDS/IPS, end point security solutions (AV, HIPS, Hard Disk Encryption), strong Authentication products (RSA SecurID), Content Security Gateways (Cisco IronPort Web/Mail Security Gateways), Cisco ISE, TACACS/AAA solutions. Hands on experience in more than one technology is preferred
• Understanding of F5 load balancers.
• Should have good presentation skills - shall be able to participate the review meetings and be able put across the points of concern
• Should have Capability to conduct risk analysis, impact analysis, dependencies on customer/internal teams,
• Knowledge and experience of working with ITIL (Information Technical Infrastructure Library) Processes

Non-Technical Responsibilities

• Coordinate with other team members for availability of capable resource
• Ensure quality work - review and validate the technical configuration changes
• Coordinate with COE (Centers Of Excellence) resources for resolution of technical issues/problems before escalation to OEM (Original Equipment Manufacturers)

Technical Responsibilities

• Configuration of Cisco and Palo Alto Firewalls
• Articulate or highlight risks/dependencies
• Participation in an on-call support rotation required
• Firewall Auditing and review access control lists and updating firewalls as needed
• Interacting with various teams in managing the log management solution.
• Adhering to high-quality standards and best practices, high performance, and scalable, repeatable processes and deliverables in accordance with applicable regulations
• Analyze, troubleshoot, and investigate network security-related incident based on security platform reporting, network traffic, log files, host-based and automated security alerts
• Evaluate systems using vulnerability scanners and manual techniques to verify system security settings and configurations

Key Responsibilities

Technical skill set

• Good hands-on experience in Palo Alto, Panorama, Cisco FTD, Cisco ASA, and Cisco ISE.
• Full understanding of Palo Alto Firewall concepts like Security Zones, Security policy ordering, Searching and Sorting Audit logs, Address Sets, negated addresses, User Roles and tables, route-based policies, address-books, Application traffic control etc.
• Must have hand on Cisco ISE for VPN authentication, AAA, policy creation.
• Understanding and experience with routing protocols
• Handson Skill on handling Security Incidents and plan mitigation.
• Good understanding of Symantec DLP
• Should have good understanding and extensive hands-on experience on various security technologies including Firewalls, VPN\'s, IDS/IPS, end point security solutions (AV, HIPS, Hard Disk Encryption), strong Authentication products (RSA SecurID), Content Security Gateways (Cisco IronPort Web/Mail Security Gateways), Cisco ISE, TACACS/AAA solutions. Hands on experience in more than one technology is preferred
• Understanding of F5 load balancers.
• Should have good presentation skills - shall be able to participate the review meetings and be able put across the points of concern
• Should have Capability to conduct risk analysis, impact analysis, dependencies on customer/internal teams,
• Knowledge and experience of working with ITIL (Information Technical Infrastructure Library) Processes

Non-Technical Responsibilities

• Coordinate with other team members for availability of capable resource
• Ensure quality work - review and validate the technical configuration changes
• Coordinate with COE (Centers Of Excellence) resources for resolution of technical issues/problems before escalation to OEM (Original Equipment Manufacturers)

Technical Responsibilities

• Configuration of Cisco and Palo Alto Firewalls
• Articulate or highlight risks/dependencies
• Participation in an on-call support rotation required
• Firewall Auditing and review access control lists and updating firewalls as needed
• Interacting with various teams in managing the log management solution.
• Adhering to high-quality standards and best practices, high performance, and scalable, repeatable processes and deliverables in accordance with applicable regulations
• Analyze, troubleshoot, and investigate network security-related incident based on security platform reporting, network traffic, log files, host-based and automated security alerts
• Evaluate systems using vulnerability scanners and manual techniques to verify system security settings and configurations

Skill Requirements

Technical skill set

• Good hands-on experience in Palo Alto, Panorama, Cisco FTD, Cisco ASA, and Cisco ISE.
• Full understanding of Palo Alto Firewall concepts like Security Zones, Security policy ordering, Searching and Sorting Audit logs, Address Sets, negated addresses, User Roles and tables, route-based policies, address-books, Application traffic control etc.
• Must have hand on Cisco ISE for VPN authentication, AAA, policy creation.
• Understanding and experience with routing protocols
• Handson Skill on handling Security Incidents and plan mitigation.
• Good understanding of Symantec DLP
• Should have good understanding and extensive hands-on experience on various security technologies including Firewalls, VPN\'s, IDS/IPS, end point security solutions (AV, HIPS, Hard Disk Encryption), strong Authentication products (RSA SecurID), Content Security Gateways (Cisco IronPort Web/Mail Security Gateways), Cisco ISE, TACACS/AAA solutions. Hands on experience in more than one technology is preferred
• Understanding of F5 load balancers.
• Should have good presentation skills - shall be able to participate the review meetings and be able put across the points of concern
• Should have Capability to conduct risk analysis, impact analysis, dependencies on customer/internal teams,
• Knowledge and experience of working with ITIL (Information Technical Infrastructure Library) Processes

Non-Technical Responsibilities

• Coordinate with other team members for availability of capable resource
• Ensure quality work - review and validate the technical configuration changes
• Coordinate with COE (Centers Of Excellence) resources for resolution of technical issues/problems before escalation to OEM (Original Equipment Manufacturers)

Technical Responsibilities

• Configuration of Cisco and Palo Alto Firewalls
• Articulate or highlight risks/dependencies
• Participation in an on-call support rotation required
• Firewall Auditing and review access control lists and updating firewalls as needed
• Interacting with various teams in managing the log management solution.
• Adhering to high-quality standards and best practices, high performance, and scalable, repeatable processes and deliverables in accordance with applicable regulations
• Analyze, troubleshoot, and investigate network security-related incident based on security platform reporting, network traffic, log files, host-based and automated security alerts
• Evaluate systems using vulnerability scanners and manual techniques to verify system security settings and configurations

Other Requirements

Technical skill set

• Good hands-on experience in Palo Alto, Panorama, Cisco FTD, Cisco ASA, and Cisco ISE.
• Full understanding of Palo Alto Firewall concepts like Security Zones, Security policy ordering, Searching and Sorting Audit logs, Address Sets, negated addresses, User Roles and tables, route-based policies, address-books, Application traffic control etc.
• Must have hand on Cisco ISE for VPN authentication, AAA, policy creation.
• Understanding and experience with routing protocols
• Handson Skill on handling Security Incidents and plan mitigation.
• Good understanding of Symantec DLP
• Should have good understanding and extensive hands-on experience on various security technologies including Firewalls, VPN\'s, IDS/IPS, end point security solutions (AV, HIPS, Hard Disk Encryption), strong Authentication products (RSA SecurID), Content Security Gateways (Cisco IronPort Web/Mail Security Gateways), Cisco ISE, TACACS/AAA solutions. Hands on experience in more than one technology is preferred
• Understanding of F5 load balancers.
• Should have good presentation skills - shall be able to participate the review meetings and be able put across the points of concern
• Should have Capability to conduct risk analysis, impact analysis, dependencies on customer/internal teams,
• Knowledge and experience of working with ITIL (Information Technical Infrastructure Library) Processes

Non-Technical Responsibilities

• Coordinate with other team members for availability of capable resource
• Ensure quality work - review and validate the technical configuration changes
• Coordinate with COE (Centers Of Excellence) resources for resolution of technical issues/problems before escalation to OEM (Original Equipment Manufacturers)

Technical Responsibilities

• Configuration of Cisco and Palo Alto Firewalls
• Articulate or highlight risks/dependencies
• Participation in an on-call support rotation required
• Firewall Auditing and review access control lists and updating firewalls as needed
• Interacting with various teams in managing the log management solution.
• Adhering to high-quality standards and best practices, high performance, and scalable, repeatable processes and deliverables in accordance with applicable regulations
• Analyze, troubleshoot, and investigate network security-related incident based on security platform reporting, network traffic, log files, host-based and automated security alerts
• Evaluate systems using vulnerability scanners and manual techniques to verify system security settings and configurations