This position will be on-site reporting to our Bangalore office, M-F
This role requires shift flexibility, including the ability to rotate between days, mids, and nights.
The Perimeter Security Engineer is responsible for designing, implementing, administering, monitoring, and supporting enterprise perimeter security controls across on-premises, cloud, and remote-access environments. The role provides deep operational expertise in next-generation firewalls and secure web proxy technologies, partners with infrastructure and application teams to resolve connectivity and policy issues, and strengthens security through disciplined change, compliance, lifecycle, and incident-management practices.
Administer enterprise firewalls, including security policies, NAT, routing, VPN, application control, URL filtering, threat prevention, software upgrades, high availability, monitoring, auditing, and rule-base hygiene.
Configure, operate, and troubleshoot secure web proxy and cloud-delivered security services, including explicit and transparent proxy, PAC files, authentication, SSL/TLS inspection, URL categorization, malware controls, and policy enforcement.
Plan, design, implement, and validate improvements, migrations, replacements, and standardization of perimeter security components.
Investigate security events and indicators involving internet ingress and egress, remote access, web traffic, command-and-control activity, malicious downloads, and policy violations.
Assess and implement firewall and proxy requests with appropriate business justification, least-privilege access, application awareness, risk review, testing, and rollback planning.
Monitor platform availability, capacity, performance, license health, certificate validity, and high-availability status; Maintain technical standards, ruleset documentation, object inventories,



network diagrams, runbooks, software-release plans, hardware lifecycle records, and operational procedures.
Support security compliance and audit activities by producing evidence, reviewing access, remediating findings, and reporting adherence to approved policies and standards.
Collaborate with network, cloud, endpoint, SOC, IAM, application, and vendor teams; Next-Generation Firewalls: (Fortinet or Palo Alto Networks) NGFW and Panorama; App-ID, User-ID, Content-ID; security profiles; Secure Web Proxy / SSE: Zscaler Internet Access, Broadcom Symantec ProxySG, Netskope, Forcepoint, or equivalent; proxy policy, PAC files, authentication, SSL inspection, URL filtering, sandboxing, DLP integration, and troubleshooting
Cloud Security: AWS and Microsoft Azure networking and security controls; cloud firewalls, security groups, route tables, load balancers, private connectivity, and hybrid traffic flows. Network & Security Foundations: TCP/IP, DNS, DHCP, TLS, BGP, OSPF, VLANs, routing and switching, load balancers, certificates/PKI, packet capture, and network traffic analysis.
Operations & Tooling: configuration backup; scripting or automation with Python, PowerShell, APIs, or infrastructure-as-code is desirable.
Minimum 5 years of relevant hands-on experience in perimeter security, with strong operational expertise in enterprise firewall and secure web proxy technologies.




Proven experience implementing and supporting Palo Alto Networks firewalls and Panorama in enterprise environments; Prisma Access experience is strongly preferred.
Hands-on experience with at least one enterprise secure web proxy or Security Service Edge platform such as Zscaler, Symantec ProxySG, Netskope, or Forcepoint.
Professional experience in information security, network security, consulting, managed services, or an enterprise security operations role.
Experience working within formal incident, problems, change, vulnerability, and configuration-management processes.
Strong written and verbal communication skills, including the ability to explain technical risks and solutions to technical and non-technical stakeholders.
Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related discipline, or equivalent practical experience.
This role is Work from Office.
Palo Alto Networks Certified Network Security Engineer (PCNSE)/ Fortinet Certified Skilled NSE4 & NSE5 or current equivalent.
CCNP Security, CISSP, or a relevant cloud security certification from Microsoft Azure or AWS.
Work/life balance
Professional training resources
Creative problem-solving and the ability to tackle unique, complex projects
Optiv Chips In' encourages employees to volunteer and engage with their teams and communities.
The ability and technology necessary to productively work remotely/from home (where applicable)
All qualified applicants for employment will be considered without regard to race, color, religion, sex, gender identity or expression, sexual orientation, pregnancy, age 40 and over, marital status, genetic information, national origin, status as an individual with a disability, military or veteran status, or any other basis protected by federal, state, or local law.

📌 Senior Cyber Security Consultant - Security Leadership (Bengaluru)
🏢 Optiv
📍 Bengaluru