Position Description:Job Title:

Senior Palo Alto GlobalProtect Engineer (L3)

Experience:

6-8+ Years

Job Summary:

#LI-SY4

We are seeking a Senior GlobalProtect Engineer to provide L3 support and technical leadership for Palo Alto GlobalProtect and Next Generation Firewall environments. The role involves advanced troubleshooting, platform administration, solution design support, major incident resolution, upgrades, and continuous improvement of the enterprise remote access infrastructure.

Key Responsibilities:

- Provide L3 support for Palo Alto GlobalProtect infrastructure in large enterprise environments.
- Design, configure, and administer GlobalProtect Portal, Gateway, HIP Profiles, and VPN infrastructure.
- Troubleshoot complex VPN connectivity, routing, authentication, certificate, and performance issues.
- Configure and maintain Palo Alto Next Generation Firewalls, Security Policies, NAT Policies, and GlobalProtect configurations.
- Integrate GlobalProtect with Active Directory, LDAP, RADIUS, SAML, MFA, and certificate-based authentication.
- Perform PAN OS upgrades, GlobalProtect client upgrades, firmware maintenance, and patch management.
- Configure and troubleshoot High Availability (HA), Gateway failover, and disaster recovery solutions.
- Analyze packet captures, firewall logs, and traffic flows using Wireshark and Palo Alto diagnostic tools.
- Optimize VPN performance, split tunneling, HIP policies, and security configurations.
- Support change implementation, release activities, and production deployments.




- Lead root cause analysis (RCA) for major incidents and implement permanent corrective actions.
- Develop automation scripts using PowerShell or Python for operational efficiency.
- Mentor L1/L2 engineers and provide technical guidance during incident resolution.
- Create architecture documentation, operational runbooks, and knowledge articles.

Required Skills:

- 6-8+ years of hands-on experience with Palo Alto GlobalProtect and NGFW.
- Solid expertise in GlobalProtect Portal, Gateway, HIP checks, Always On VPN, and Split Tunnel configurations.
- Advanced knowledge of PAN OS administration and Panorama.
- Strong understanding of TCP/IP, BGP, OSPF, NAT, DNS, SSL/IPSec VPN, and enterprise networking.
- Experience with SAML, LDAP, RADIUS, Active Directory, MFA, and certificate-based authentication.
- Experience troubleshooting complex VPN, routing, firewall, and endpoint connectivity issues.
- Knowledge of Prisma Access, Zero Trust architecture, and cloud-based remote access solutions is highly desirable.
- Experience performing packet analysis using Wireshark or tcpdump.
- Working knowledge of PowerShell or Python automation.
- Experience in ITIL environments, including incident, problem, and change management.
- PCNSA or PCNSE certification is preferred.

Locations:

- LA- Palo Alto Global Protect
- Category: Infrastructure/Cloud
- Main location: India, Karnataka, Bangalore
- Position ID: J0726-1152
- Employment Type: Full Time

📌 LA- Palo Alto Global Protect (Bengaluru)
🏢 Cgi Group
📍 Bengaluru