Role Summary: Lead secure network segmentation and cross-border connectivity between Russia and Global environments. Requires hands-on expertise in Check Point, Palo Alto, Zscaler, Cloudflare, hybrid connectivity, security architecture, automation and L3/L4 operations.

Key Responsibilities

- Design Russia-to-Global architecture, trust zones, routing boundaries, north-south/east-west controls, microsegmentation, cross-border allowlists, HLD/LLD, threat models and control mappings.
- Design/operate Check Point R81.x and Palo Alto PAN-OS firewalls: HA/ClusterXL/VSX, Panorama, policy/rulebase, NAT, SSL/TLS inspection, Threat Prevention, WildFire, URL filtering and failover.
- Implement Zscaler ZIA/ZPA: identity-aware egress, SSL inspection, CASB/DLP, SaaS governance, Zero Trust application access, connector architecture, posture checks and VPN-to-ZPA migration.
- Design Yandex Cloud hybrid connectivity: IPSec Site-to-Site VPN, Cloud/Partner Interconnect, BGP, dual-tunnel HA and on-prem-to-cloud connectivity.
- Implement Cloudflare Magic Transit/Magic WAN, WAF, DDoS protection, Rate Limiting, Load Balancing, geo-steering and origin allowlisting.
- Engineer SD-WAN/MPLS/SASE using policy-based routing, IPsec/IKEv2,



TLS 1.2+/1.3 and jurisdiction-based key management.
- Ensure compliance, data residency, logging, TLS inspection governance, audit evidence, CIS-aligned controls and regulatory requirements.
- Integrate Check Point, Palo Alto, ZIA/ZPA and Cloudflare telemetry with SIEM/SOAR; build detections and lead L3/L4 incidents, containment and RCA.
- Automate policies using Terraform, Ansible and vendor APIs: Check Point Management API, Palo Alto/Panorama, ZIA/ZPA REST and Cloudflare API. Implement CI/CD, policy testing, drift detection and rollback.
- Maintain ITSM/CMDB, change/incident/problem processes, CAB governance, documentation and stakeholder communication.

Essential Skills: Check Point R81.x, ClusterXL/VSX/MDS/Smart-1, Palo Alto NGFW/Panorama, App-ID/User-ID, WildFire, SSL Decryption, ZIA/ZPA, CASB/DLP, Cloudflare WAF/Magic Transit/Magic WAN/DDoS, Yandex Cloud VPN/Interconnect/BGP, SIEM/SOAR, SD-WAN/MPLS/SASE, IPsec/IKEv2, Terraform, Ansible, REST APIs, network security architecture, microsegmentation and Zero Trust. Certifications: CCSA/CCSE, PCNSA/PCNSE, Zscaler certifications, CCNP/CCIE Security, CISSP, CyberOps or Security+.

📌 Lead Software Engineer (Chennai)
🏢 Virtusa
📍 Chennai