About the Role
We are seeking an experienced Palo Alto Security Engineer to drive perimeter security infrastructure and firewall policy separation for a large-scale corporate divestiture programme. You will be responsible for designing and building Palo Alto firewalls at current PoP locations, migrating security policies, and ensuring a clean, secure perimeter ahead of Day 1.
Key Responsibilities

- Perimeter Build-Out: Design and deploy Palo Alto firewalls at new PoP locations, configuring zones, routing, NAT, threat prevention, and SSL decryption.
- Panorama Management: Configure device groups, templates, and strict Role-Based Access Control (RBAC) to enforce administrative separation between entities.
- Policy Separation & Cleanup: Analyze legacy firewall rulebases, migrate retained policies, and rigorously clean up divested-entity rules to ensure no cross-entity access remains.
- Cross-Functional Collaboration: Partner with core routing, Zscaler security, and automation teams to integrate the internet edge and establish remote access/site-to-site VPNs.
- High Availability: Deploy and validate active/passive or active/active HA firewall pairs.





Required Skills & Experience

- Palo Alto Mastery: Deep, hands-on expertise with Palo Alto NGFWs (PA-Series/VM-Series) and Panorama (centralized management, templates, device groups).
- Network Security: Strong understanding of TCP/IP, zone-based firewall architecture, VPNs (IPSec, GRE), and routing integration (BGP, OSPF).
- Automation & DevOps: Proven experience with "firewall-as-code" using Terraform, Python scripting, and Git/GitHub within CI/CD pipelines.
- Migration Experience: Prior experience executing complex firewall migrations or policy separation programmes with strict change management.
- Cloud & Identity: Understanding of cloud security (AWS, Azure, GCP) and identity/access control (Cisco ISE, TACACS+, User-ID).

Desirable Qualifications

- Certifications: PCNSE, CCNP Security, or CISSP.
- Tools & Integrations: Experience with Palo Alto Expedition, Zscaler integration, and IPAM tools (e.g., Nautobot).
- Background: Previous experience in corporate network separation or divestiture programmes.

📌 Palo Alto Engineer (India)
🏢 TRIGENT SOFTWARE PRIVATE
📍 India