Network Engineer

Position Name: Network Engineer L2

Experience: 6-9 Years

Location: Pune, Maharashtra

Shift: Rotational shift including night shift- should be flexible

Palo Alto Networks Firewall

Palo Alto Panorama

NSX

Azure Firewall

Networking TCP/IP, routing, DNS, NAT, VLAN

Change Management

Verbal Communication

• We are looking for a skilled Network Security Engineer with hands-on experience in enterprise network security, firewall design, implementation, administration, and troubleshooting.
• The role primarily focuses on Palo Alto Networks Firewall, VMware NSX Firewall, and Microsoft Azure Firewall. The candidate will be responsible for designing and implementing security solutions, managing firewall policies and changes, troubleshooting network security issues, and collaborating with network, cloud, infrastructure, and application teams.
• The added knowledge of automation and Infrastructure as Code (IaC) practices, particularly using Terraform, Git, and GitHub.

Key Responsibilities

• Palo Alto Networks Firewall
• Design, implement, configure, and maintain Palo Alto Networks firewalls in enterprise environments.
• Manage firewall security policies, NAT policies, zones, objects, routing, and security profiles.
• Work with Panorama for centralized firewall management and policy deployment.
• Analyze firewall traffic and security logs for troubleshooting and incident resolution.
• Perform firewall changes based on business and application requirements.
• Troubleshoot connectivity issues involving applications, ports, protocols, routing, NAT, and security policies.
• Participate in firewall upgrades, configuration changes, maintenance activities, and security improvements.
• Follow defined change-management and security processes for production implementations.
• VMware NSX Firewall
• Design and implement security policies using VMware NSX Firewall / Distributed Firewall (DFW).
• Configure and manage security groups, policies, rules, and network segmentation.
• Implement East-West traffic security and micro-segmentation based on application requirements.
• Analyze traffic flows and troubleshoot connectivity issues within NSX environments.
• Perform NSX firewall changes and validate the impact after implementation.
• Microsoft Azure Firewall
• Design, implement, and manage Azure Firewall security configurations.
• Work with Azure Firewall Policy, Network Rule Collections, Application Rule Collections, and NAT Rule Collections.
• Analyze Azure network traffic flows and determine appropriate firewall policies.
• Work with Azure networking components including VNets, subnets, routing, peering, and network security controls.
• Perform planned firewall changes and validate connectivity following implementation.
• Troubleshoot Azure Firewall and network connectivity issues in collaboration with cloud and infrastructure teams.
• Automation & Infrastructure as Code
• Apply Infrastructure as Code (IaC) principles to network and security infrastructure.
• Develop and maintain Terraform configurations for firewall and cloud infrastructure.
• Use Git and GitHub for source-code and configuration management.
• Create and manage Git branches and follow Pull Request (PR) and code-review processes.
• Understand GitHub workflows and basic CI/CD concepts.
• Support automation of firewall and security configuration deployments using Terraform.
• Knowledge of GitHub Actions and Ansible is an added advantage.
• Required Technical Skills

Must Have:

• Strong hands-on experience with Palo Alto Networks Firewall.
• Experience with Palo Alto Panorama.
• Experience in firewall policy design, implementation, change management, and troubleshooting.
• Working knowledge of VMware NSX Firewall / Distributed Firewall.
• Working knowledge of Microsoft Azure Firewall and Azure networking.
• Strong understanding of networking fundamentals including TCP/IP, routing, DNS, NAT, VLANs, and network security concepts.
• Knowledge of Terraform and Infrastructure as Code (IaC).
• Working knowledge of Git and GitHub.

Good to Have:

• Experience with GitHub Actions / CI-CD workflows.
• Knowledge of Ansible or other network automation tools.
• Experience with cloud security and enterprise network architecture.
• Knowledge of additional security technologies such as FortiGate, Zscaler, F5, or other enterprise security platforms.
• Relevant Palo Alto, VMware, or Azure certifications.

Key Competencies

• Strong network security troubleshooting and analytical skills.
• Ability to understand application traffic flows and translate requirements into firewall policies.
• Experience working in enterprise production environments.
• Good understanding of security and change-management processes.
• Ability to work collaboratively with network, cloud, infrastructure, application, and security teams.
• Good documentation and communication skills.
• Ability to participate in design discussions and provide technical recommendations.

Experience

• Recommended Experience: 4–8 years in Network Security / Firewall / Network Engineering, with relevant hands-on experience in Palo Alto, NSX, and/or Azure Firewall.

Role Keywords

• Network Security | Palo Alto | Panorama | NSX Firewall | Distributed Firewall | Azure Firewall | Firewall Design | Firewall Implementation | Firewall Troubleshooting | Change Management | Terraform | IaC | Git | GitHub | GitHub Actions | Cloud Security