Detailed JD (Roles and Responsibilities)

: Looking for Senior Zscaler & Firewall Security Engineer (L2/L3)—Designed specifically for large migrations, platform consolidation and SASE migration.

It includes responsibilities, deliverables, L2 vs L3 split.

Role Summary

We are seeking a seasoned security engineer to own and evolve our network perimeter and web security controls across on-prem and cloud. The role covers advanced operations, engineering, and continuous improvement for Firewalls, Secure Web Gateways (SWG), Proxies, DNS security and Web Application Security. The ideal candidate has deep hands-on expertise with major firewall platforms, TLS inspection, Zero Trust access patterns, and automation-first operations.

L2 Focus: Advanced operations, complex incident handling, policy changes, routine engineering tasks.

L3 Focus: Design/architecture, complex troubleshooting (Tier-3), migrations, performance optimization, and platform ownership/roadmap.

Required Skills & Experience:

Technical Domains

Firewalls (NGFW): Fortinet FortiGate,Palo Alto Networks, Check Point, Cisco Firepower/ASA (expert on at least Fortigate; working knowledge of others).

Automation/Scripting (strongly preferred; required for L3):



Python/PowerShell, REST APIs (PAN-OS, ZIA), Terraform/Ansible, GitOps workflows.

Total Experience

9+ Years

Relevant Experience

8-10 Years

Mandatory skills

Firewall & Security Platforms: FortiGate (primary), Palo Alto, Check Point, Cisco

Cloud Security / SWG: Zscaler, Prisma, Netskope

Networking: Routing (BGP/OSPF), NAT, PBR

Web Security (L3): WAF, CDN, API security

Automation (L3): Python, PowerShell, APIs, Terraform, Ansible

Desired skills

Web App Security (nice to have mandatory for L3): WAF/CDN (Akamai, Cloudflare, F5 ASM, Azure WAF), bot mitigations, API gateways, mTLS.

Automation/Scripting (strongly preferred; required for L3): Python/PowerShell, REST APIs (PAN-OS, ZIA), Terraform/Ansible, GitOps workflows.

Domain (Industry)

Zacaler

Work Location

Bangalore; Hyderabad; Pune

Background checK (Before onboarding / After onboarding)

After onboarding

BGV Vendor

-

Mode of Interview- Telephonic/Face to Face/Video Interview

Telephonic/Face to Face/Video Interview

WFO / WFH / Hybrid

Hybrid

Shift Details (Time)

Europe Business working

📌 Senior Zscaler & Firmwall Security Engineer (India)
🏢 Infowaysolutions
📍 India