Description

: Network Security Engineer – Palo Alto Networks / Panorama

Role Summary

We are looking for an experienced Network Security Engineer with strong hands-on expertise in Palo Alto Networks NGFW and Panorama. The engineer will be responsible for day-to-day firewall security operations, security policy management, Panorama administration, firewall upgrades, security profile management, traffic investigation, troubleshooting, and implementation of network security changes.

Key Responsibilities

Palo Alto Firewall Policy Management

Create, modify, review, and troubleshoot Palo Alto Networks Security Policy rules.

Manage source, destination, application, service, zone, and security profile configurations.

Create and maintain address objects, address groups, service objects, tags, and related firewall objects.

Review existing firewall rules and support rule cleanup and optimization.

Troubleshoot policy-related connectivity issues using traffic logs, session information, packet captures, and policy matching.

Implement firewall changes through approved change-management processes.

Panorama Administration

Perform administration and operational management of Palo Alto Networks Panorama.

Manage Device Groups, Templates, Template Stacks, shared objects, and policy hierarchy.

Onboard and manage firewalls through Panorama.

Perform configuration commits and pushes and troubleshoot commit or synchronization failures.

Monitor firewall connectivity and configuration synchronization with Panorama.





Support migration of firewall configurations and policies between Panorama environments where required.

Firewall Upgrades & Lifecycle Management

Plan and execute PAN-OS firewall and Panorama upgrades.

Perform upgrade readiness checks, compatibility verification, configuration backups, and post-upgrade validation.

Coordinate firewall HA upgrades while minimizing service disruption.

Troubleshoot upgrade failures and engage Palo Alto Networks TAC where necessary.

Support firewall lifecycle activities including deployment, migration, replacement, and decommissioning.

Security Profiles & Threat Prevention

Configure, maintain, and troubleshoot Palo Alto Networks security profiles including:

Antivirus

Anti-Spyware

Vulnerability Protection

URL Filtering

WildFire Analysis

File Blocking

DNS Security

SSL/TLS Decryption policies, where applicable

Ensure appropriate security profiles are attached to relevant security policies and investigate security events generated by threat-prevention controls.

Network Security Investigation & Troubleshooting

Investigate firewall traffic, threat, URL, system, configuration, and authentication logs.

Troubleshoot application connectivity and firewall access issues.

Analyze traffic flow involving source/destination IP addresses,



ports, applications, zones, NAT, and security policies.

Perform session-level troubleshooting using Palo Alto CLI and GUI.

Use packet captures and traffic analysis to identify firewall, routing, NAT, or application-related issues.

Work with application, cloud, server, and network teams during incident investigation and service restoration.

Support RCA preparation for network security incidents where required.

Enable Skills-Based Hiring No ECMS REQ IDAdditional Details

- ECMS REQ ID : 583988
- Project Location 1 : TELANGANA | HYDERABAD
- Project Location 2 : (No Value)
- Project Location 3 : (No Value)
- Project Location 4 : (No Value)
- Delivery SPOC : [email protected]
- Relevant Experience : 4+
- Mandatory skills : Robust hands-on experience with Palo Alto Networks Next-Generation FirewallsStrong experience with PanoramaSecurity Policy and NAT Policy configurationDevice Groups, Templates, and Template StacksPAN-OS upgrades and firewall lifecycle management
- Desired skills : Palo Alto Networks PCNSE certificationExperience with Palo Alto Networks APIs and automation using Python, REST API, or pan-os-pythonExperience with GlobalProtect
- Domain (Industry) : Cyber Sec
- BGC (Before onboarding / After onboarding) : PreOB
- Total Experience (Ex. 5-7 Years) : 5-10
- BGC Details : NA
- BGC Vendor : NA
- Mode of Interview : Face to Face
- WFO / WFH / Hybrid : Hybrid
- Please enter shift timings : 24*7, Should be flexible
- Shift Timings : Others

📌 ECMSRQ#583988_CYBERSEC-Network Security Engineer u2013 Firewall Operations_india (India)
🏢 Trigent Software
📍 India