About You:

We are looking for an L2 Security Administrator with strong hands-on experience in enterprise security infrastructure, Trend Micro Deep Security Manager (DSM), and firewall technologies including Palo Alto and Check Point. The candidate will be responsible for security administration, configuration, troubleshooting, policy management, incident response, upgrades, optimization, and maintaining the security posture of enterprise infrastructure across data centres.

Key Responsibilities

Trend Micro Deep Security / DSM Administration

- Configure, administer, and manage Trend Micro Deep Security Manager (DSM).
- Manage and troubleshoot Deep Security Agents across Windows and Linux servers.
- Configure and maintain security policies based on server and application requirements.

- Manage and troubleshoot
- Anti-Malware

- Intrusion Prevention

- Integrity Monitoring

- Firewall
- Web Reputation, where applicable
- Create, modify, and maintain security rules and policies.
- Troubleshoot agent activation, communication, synchronization, and policy-related issues.
- Manage Deep Security Agent deployment, upgrades, and lifecycle activities.
- Monitor DSM and agent health, performance, and protection status.
- Troubleshoot DSM services, database, communication, and connectivity issues.
- Analyze security events and take appropriate corrective actions.
- Tune security policies to balance security, application requirements, and system performance.

Palo Alto Firewall Administration

- Configure, administer, and troubleshoot Palo Alto firewalls.
- Manage security policies, NAT policies, zones, interfaces, and routing.
- Analyze traffic logs, threat logs, system logs, and configuration issues.
- Troubleshoot application connectivity and firewall policy-related issues.
- Configure and troubleshoot VPN/IPSec tunnels where applicable.
- Monitor firewall CPU, memory, sessions, interfaces, and overall health.
- Troubleshoot and manage firewall HA environments.
- Perform firewall policy reviews and optimization.
- Support firewall upgrades, configuration backups, and maintenance activities.
- Perform packet-level troubleshooting using available Palo Alto tools.

Check Point Firewall Administration

- Configure, administer, and troubleshoot Check Point firewalls.
- Manage security policies, NAT, objects, services, and access rules.
- Analyze Check Point logs and security events.
- Troubleshoot application connectivity and traffic-related issues.
- Troubleshoot VPN and connectivity issues.
- Monitor firewall health and HA status.
- Support policy installation and validation.
- Perform configuration backup and restoration activities.
- Support Check Point upgrades and maintenance activities.
- Perform firewall rule review and optimization.

Security Incident Management & RCA

- Handle and troubleshoot L2 security incidents related to DSM, Palo Alto, and Check Point.
- Analyze malware, IPS, firewall, and security events.




- Investigate blocked or abnormal network/application traffic.
- Perform detailed troubleshooting and identify root cause.
- Identify false positives and implement appropriate security policy/rule adjustments.
- Perform Root Cause Analysis (RCA) for recurring or critical security incidents.
- Implement corrective and preventive actions.
- Coordinate with L1, Network, Server, Application, SOC, and L3 Security teams.
- Provide technical support during critical security incidents and major incident calls.

Security Policy & Rule Management

- Review and implement firewall rules based on approved business/application requirements.
- Configure and maintain security policies on Palo Alto and Check Point.
- Review existing firewall rules for security and operational effectiveness.
- Identify unused, duplicate, or unnecessary rules and recommend cleanup.
- Configure NAT policies and troubleshoot NAT-related connectivity issues.
- Review security logs to validate firewall policy behaviour.
- Implement approved security changes following change management procedures.
- Ensure changes are properly documented and validated.

Network Security Troubleshooting

- Troubleshoot complex connectivity issues across network, firewall, server, and application layers.
- Analyze traffic flows using firewall logs and packet captures.
- Troubleshoot TCP/IP, routing, DNS, NAT, VPN, and application connectivity issues.
- Coordinate with Network and Server teams to identify end-to-end connectivity problems.
- Identify whether traffic is blocked by firewall policy, routing, server configuration, or security controls.
- Provide technical recommendations for recurring connectivity and security issues.

Vulnerability & Server Security

- Support server security hardening activities.
- Coordinate vulnerability remediation with Server and Application teams.
- Analyze vulnerabilities and recommend appropriate mitigation controls.
- Implement virtual patching/IPS protection through Trend Micro where applicable.
- Verify security protection after server patching and application changes.
- Troubleshoot security-related application performance or connectivity issues.

Upgrade, Backup & Maintenance

- Plan and execute Trend Micro DSM and Deep Security Agent upgrades.
- Support Palo Alto and Check Point firewall upgrades.
- Perform configuration backups and restoration activities.
- Validate compatibility and operational readiness before upgrades.
- Conduct post-upgrade health checks and validation.
- Support firewall HA/failover testing.
- Support DR and security infrastructure recovery activities.
- Maintain upgrade, rollback, backup, and recovery procedures.





Monitoring & Security Operations

- Monitor overall security posture of the enterprise environment.
- Review security dashboards, logs, alerts, and compliance status.
- Identify recurring issues and recommend security improvements.
- Prepare security reports and operational metrics.
- Maintain security documentation, SOPs, policies, and configuration records.
- Support security audits and compliance activities.
- Provide technical guidance and support to L1 resources.
- Work closely with Network, Server, Storage, Application, SOC, and L3 Security teams.

Required Skills

- Strong knowledge of Network and Information Security concepts.
- Strong hands-on experience with Trend Micro Deep Security Manager (DSM).
- Strong hands-on experience with Palo Alto and Check Point firewalls.

- Good knowledge of

- Firewall policies

- NAT

- Security zones

- Routing

- VPN/IPSec
- HA

- Firewall logging

- Traffic flow troubleshooting
- Solid understanding of Trend Micro Deep Security:
- Anti-Malware

- Intrusion Prevention

- Integrity Monitoring

- Firewall

- Security policies
- Strong troubleshooting skills across network, firewall, server, and application layers.
- Good knowledge of TCP/IP, DNS, routing, and network connectivity.
- Experience in security incident management and RCA.
- Understanding of vulnerability management and virtual patching.
- Good knowledge of ITIL processes and change management.
- Experience working in enterprise Data Centre environments.

Preferred Qualifications

- Any Graduation with minimum 5 years of experience in Security Operations/Data Centre environments.
- Strong hands-on experience with Trend Micro DSM, Palo Alto, and Check Point.
- Certifications such as PCNSA/PCNSE, Check Point CCSA/CCSE, Security+, or equivalent will be an advantage.
- Experience with SIEM/SOC operations and vulnerability management.
- Knowledge of enterprise network architecture and security design.
- Experience supporting 24x7 enterprise security environments.

Soft Skills

- Strong troubleshooting and analytical skills.
- Good incident management and RCA capabilities.
- Good communication and coordination abilities.
- Ability to handle critical security incidents under pressure.
- Strong ownership and problem-solving attitude.
- Ability to work effectively with Network, Server, Application, SOC, and L3 teams.
- Good documentation and knowledge-sharing skills.
- Proactive approach toward identifying and resolving recurring security issues.

L2 Role Expectation The L2 resource should be able to independently administer and troubleshoot Trend Micro DSM, Palo Alto, and Check Point firewalls; manage security policies and rules; analyze security events; perform RCA; support upgrades, backups, HA/failover and maintenance activities; and provide technical guidance to L1 resources. Complex security architecture, design, and major changes should be coordinated with L3/SME teams

📌 Senior Technical Consultant (Navi Mumbai)
🏢 Orange Business Services
📍 Navi Mumbai