We are hiring a Senior Firewall & SSE Security Engineer

Experience: 8+yrs

Mode: Hybrid

Location: Bangalore

Certification Firewall / network-security certification required

Primary Focus Palo Alto NGFW/Panorama/SSE, Fortinet and Cisco ASA/Firepower

Role Summary:

Senior network security engineer responsible for firewall and Secure Service Edge implementation, migration,policy transformation and production cutover across Palo Alto Networks, Fortinet and Cisco technologies.

Key Responsibilities / Implementation Scope

- Design, configure, migrate and troubleshoot enterprise firewall services across Palo Alto Networks,Fortinet and Cisco firewall platforms.
- Implement and support Palo Alto Networks NGFW platforms including PA-5450 and PA-3220, with security zones, interfaces, routing, NAT, security policy and threat-prevention profiles.
- Configure and operate Panorama for centralized policy, object, template/device-group and firewall management.
- Support Fortinet FortiGate firewalls, including OT firewall requirements and industrial/segmented network use cases where applicable.
- Support legacy Cisco ASA and Cisco Firepower / Secure Firewall environments during migration and replacement activities, including VPN appliance functions where present.
- Support Palo Alto SSE / Prisma Access / GlobalProtect components where required for remote-user and secure-access connectivity.
- Build and migrate firewall policies, NAT/PAT rules, objects, zones, security profiles and networksegmentation controls.
- Configure and troubleshoot site-to-site IPsec VPNs, remote-access dependencies, routing through firewalls and failover/high-availability behavior.
- Perform rule-base analysis, cleanup, optimization and validation while maintaining business connectivity and change-control requirements.
- Troubleshoot application flows using session/browser tools, packet captures,



firewall logs and routing/NAT analysis.
- Execute firewall cutovers/migrations with pre-checks, validation, rollback support, issue resolution and hypercare.
- Prepare implementation runbooks, policy migration workbooks, test scripts, rollback plans and as-built documentation.

Required Technical Skills

Area Required Hands-on Experience

Palo Alto NGFW PA-5450, PA-3220, PAN-OS, zones, interfaces, routing, NAT, security policy,threat prevention and SSL/TLS inspection.

Panorama Centralized firewall management, device groups, templates/template stacks,

objects, policy deployment and operational troubleshooting.

Palo Alto SSE / Remote Access Palo Alto SSE, Prisma Access and GlobalProtect architecture/operations whescope.

Fortinet FortiGate policy, routing, NAT, VPN, segmentation and OT firewall use cases

Cisco Firewall Cisco ASA and Cisco Firepower / Secure Firewall; legacy support, migration appliance functions.

VPN / Segmentation IPsec VPN, remote-access dependencies, network segmentation, zone-baseand high-availability/failover concepts.

Troubleshooting / Migration Session analysis, logs, packet capture, NAT/routing analysis, rule-base cleanvendor firewall migration and production cutover.

Certification Requirements

Mandatory: At least one relevant firewall/network-security certification is required (for example PCNSE, Cisco

CCNP Security, or an appropriate current Fortinet qualified-level credential).

Preferred / Advantageous: Additional Palo Alto, Cisco Secure Firewall/Firepower or Fortinet specialist certifications and multi-vendor firewall migration experience.

Required Deliverables

- Firewall policy/NAT/object migration workbook
- Implementation runbooks and MOPs
- Firewall/SSE cutover and rollback plans
- Connectivity, security-policy and failover test scripts
- As-built configuration, rule-base documentation and operational handover

📌 Senior Firewall & SSE Security Engineer (Bengaluru)
🏢 Teamware Solutions
📍 Bengaluru