Greetings from TCS!!!

Role: Network Security Engineer

Experience: 8 to 10 years

Location: Mumbai

Responsibility of / Expectations from the Role

Firewall Engineering (Fortigate Check Point & Palo Alto)

· Design, implement, and operate NGFW policies, NAT, security profiles, and segmentation

· Manage App-ID / User-ID (Palo Alto) and Identity Awareness (Check Point)

· Configure Threat Prevention profiles: IPS, Anti-Virus, Anti-Spyware, URL filtering

· Plan and execute rulebase audits, clean-ups, and optimization to reduce risk & latency

· Perform upgrades, HA/cluster configuration, health checks, and performance tuning

· Troubleshoot L3–L7 connectivity, asymmetric routing, path MTU, SSL/TLS inspection

WAF & Edge Security (Cloudflare)

· Configure Cloudflare WAF (Managed Rules, custom rules, bot mitigation, rate limiting) · Manage CDN, DDoS protection, and Zero Trust policies (ZTNA) for applications





· Implement API protection, mTLS, and secure token-based access for services

· Optimize performance & caching while maintaining application security

· Monitor attack patterns, false positives, and tune rules based on application behavior

NAC Operations (Forescout Platform)

· Deploy and manage Forescout CounterACT for 802.1x / posture / device profiling · Enforce zero-trust access via VLAN assignments, quarantines, and policy actions

· Integrate NAC with AD/IDP, EDR, SIEM, vulnerability scanners for contextual controls

· Maintain asset inventory, device classification (IT/IoT/OT), and posture compliance

· Build remediation workflows (e.g., patch, isolate, notify) with stakeholders

📌 Network Security Engineer (Mumbai)
🏢 Tata Consultancy Services
📍 Mumbai