Hiring for Zurich Insurance — via Flexiple, the recruiting partner on this role.

About the Company

Zurich Insurance Group is one of the world's largest multi-line insurers, serving customers in more than 200 countries and territories. In 2026 Zurich opened its Global Capability Centre in Hyderabad as a zero-legacy, AI-first technology hub. Its Security Platform Services team is building an in-house network security engineering capability there, taking over firewall operations for Zurich's global estate.

About the Role

As a Level 2 Palo Alto Firewall Engineer you're the technical escalation point for Zurich's global firewall service. You resolve complex incidents, deliver higher-risk changes and upgrades through Panorama, and turn repeat operational work into automated, API-first workflows. You also mentor Level 1 engineers in Hyderabad.

This is a hybrid role from Hyderabad. Candidates who can join immediately or within 15 days are preferred.

What you'll do

- Engineer, administer and improve Palo Alto firewall platforms and Panorama across a complex global estate
- Own advanced diagnosis of firewall, routing, NAT, App-ID, DNS, VPN and connectivity issues, including during major incidents
- Assess and deliver non-standard and higher-risk changes with design review, testing and rollback plans




- Lead root-cause analysis for recurring or high-impact incidents and put fixes in place
- Plan and carry out PAN-OS upgrades, patching and lifecycle work
- Drive rule recertification, policy optimisation, object clean-up and vulnerability remediation
- Automate repeat tasks with Python, PAN-OS APIs, Ansible or Terraform, with proper governance
- Mentor Level 1 engineers and build runbooks and engineering standards

What you bring

- 4–5 years in network security engineering, with hands-on Palo Alto Networks firewalls in an enterprise setting
- Hands-on Panorama administration; Strata Cloud Manager exposure is a plus
- Strong knowledge of TCP/IP, routing, NAT, App-ID, security policy, DNS, and site-to-site and remote-access VPN
- You have troubleshot complex issues using logs, packet captures and traffic analysis
- You have delivered production changes and PAN-OS upgrades under ITIL change and problem management
- Practical scripting or automation with Python, REST APIs, Ansible or Terraform

Nice to have

- PCNSE, CCNP Security or a similar certification
- Azure or AWS network security and hybrid connectivity; Prisma Access
- Infrastructure-as-Code and Git-based workflows
- Using AI tools for policy analysis, drift detection and troubleshooting

Originally posted on: 5 Nov 2026

📌 Palo Alto Firewall Engineer, Level 2 (Hyderabad)
🏢 Flexiple
📍 Hyderabad