Job Title

Network Security Engineer

Experience

8-12 Years

Location

Bangalore

Job Summary

We are seeking an experienced L3 Network Security Engineer with strong expertise in Palo Alto, Fortinet Firewalls, Fortinet SD-WAN, Panorama, Cloud Network Security, and Data Center Migration. The ideal candidate will be responsible for designing, implementing, troubleshooting, and optimizing enterprise network security solutions while supporting business-critical infrastructure and transformation projects.

Key Responsibilities

Firewall Administration

- Design, implement, and manage Palo Alto and Fortinet firewall infrastructure.
- Configure and troubleshoot Security Policies, NAT, VPN, SSL Decryption, URL Filtering, IPS, Anti-Malware, and Application Control.
- Perform firewall rule reviews and policy optimization.
- Conduct firewall software upgrades and security patching.

Fortinet SD-WAN

- Design, deploy, and support Fortinet SD-WAN solutions.
- Configure SLA policies, Performance SLAs, Overlay VPN, ADVPN, and Dynamic Routing.
- Troubleshoot SD-WAN routing and application performance issues.
- Support Hub-and-Spoke and Multi-Hub SD-WAN architectures.

Palo Alto Panorama

- Administer Panorama for centralized policy management.
- Manage device groups, templates, template stacks, and software updates.
- Implement centralized logging and compliance reporting.
- Perform configuration backups and disaster recovery activities.

Cloud Network Security

- Deploy and support Azure Network Virtual Appliances (NVA).
- Configure Azure Virtual WAN (vWAN), Virtual Networks (VNet), Route Tables, NSGs, UDRs, and VPN Gateways.
- Implement cloud firewall solutions and hybrid connectivity.
- Troubleshoot cloud networking and security issues.

Data Center Migration

- Plan and execute data center migration activities.




- Perform firewall migration and rule migration.
- Coordinate application cutovers and migration testing.
- Validate connectivity during migration windows.
- Prepare rollback plans and post-implementation validation.

Routing & Switching

- Configure and troubleshoot:
- BGP
- OSPF
- Static Routing
- VRF
- ECMP
- Policy-Based Routing

- Analyze routing convergence and failover scenarios.

Security Operations

- Investigate and resolve P1/P2 network security incidents.
- Perform Root Cause Analysis (RCA).
- Coordinate with vendors (Palo Alto, Fortinet, Microsoft TAC).
- Implement security hardening and best practices.
- Review security advisories and recommend remediation plans.

Change & Project Management

- Prepare implementation plans, rollback plans, and test plans.
- Participate in CAB meetings.
- Execute changes during maintenance windows.
- Lead infrastructure upgrade and migration projects.

Documentation

- Develop and maintain:
- HLD/LLD
- SOPs
- Runbooks
- Knowledge Articles
- Network diagrams
- As-built documentation

Required Technical Skills

Firewalls

- Palo Alto Networks (PAN-OS)
- FortiGate Firewalls
- FortiManager
- FortiAnalyzer
- Panorama

Fortinet Technologies

- Fortinet SD-WAN
- ADVPN
- IPsec VPN
- SSL VPN
- High Availability (HA)
- Virtual Domains (VDOM)

Cloud

- Microsoft Azure
- Azure Virtual WAN
- Azure NVA
- Azure Firewall
- ExpressRoute
- VPN Gateway
- Azure Load Balancer

Routing

- BGP
- OSPF
- Static Routing




- ECMP
- Route Redistribution

Security Technologies

- IPS
- IDS
- SSL Inspection
- URL Filtering
- Application Control
- Threat Prevention
- DNS Security

Networking

- TCP/IP
- VLAN
- NAT
- QoS
- DNS
- DHCP
- Proxy
- Load Balancing

Monitoring & Management

- Panorama
- FortiManager
- FortiAnalyzer
- Azure Monitor
- Syslog
- SIEM Integration

Preferred Skills

- Zscaler Internet Access (ZIA)
- Zscaler Private Access (ZPA)
- Cisco Networking
- F5 Load Balancers
- Azure Cloud Networking
- Infrastructure as Code (Terraform/Ansible)
- Python or PowerShell scripting
- ITIL Change Management

Certifications (Preferred)

- Palo Alto Networks Certified Network Security Engineer (PCNSE)
- Fortinet NSE 4 / FCP Network Security
- Fortinet NSE 7 / FCSS Network Security
- Microsoft Azure Administrator (AZ-104)
- Azure Network Engineer (AZ-700)
- CCNP Security
- ITIL Foundation

Soft Skills

- Strong troubleshooting and analytical skills.
- Excellent verbal and written communication.
- Experience leading technical bridge calls during critical incidents.
- Ability to manage multiple priorities in a fast-paced environment.
- Solid stakeholder and vendor management skills.
- Mentoring and technical leadership for L1/L2 engineers.

Key Responsibilities Summary

- Manage Palo Alto and Fortinet firewall infrastructure.
- Administer Panorama, FortiManager, and FortiAnalyzer.
- Design and support Fortinet SD-WAN and ADVPN.
- Lead firewall upgrades, migrations, and cloud security projects.
- Support Azure networking and NVA deployments.
- Execute data center migration activities.
- Perform L3 troubleshooting for complex network security incidents.
- Drive security compliance, governance, and continuous improvement initiatives.

📌 SME- Network Security Engineer (Bengaluru)
🏢 Unisys
📍 Bengaluru