Network Security Engineer (Palo Alto Prisma Access)

Greetings from SwaaS!

Role: Palo Alto Prisma Access / Network Security Engineer

Experience: 5+ years

Location: Guindy, Chennai

Key Responsibilities & Required Skills:

1. Required Experience: 5+ years in enterprise network security, including 3+ years of hands-on Palo Alto Prisma Access experience.
2. Design, deploy, and manage Palo Alto Prisma Access (SASE/SSE), including GlobalProtect, ZTNA, Secure Web Gateway (SWG), Remote Networks, and Service Connections.
3. Configure and maintain Palo Alto Next-Generation Firewalls (NGFW), including PA-Series, VM-Series, Panorama, and PAN-OS, covering firewall policies, threat prevention, SSL/TLS decryption, HA, and upgrades.
4. Implement Zero Trust, network segmentation, and secure connectivity across enterprise networks, data centers, and cloud environments, including IPsec VPN, SD-WAN, and IT/OT security.
5. Manage identity-integrated security using Microsoft Entra ID (Azure AD), SAML, LDAP, and SCIM, including device posture checks and identity-based access policies.
6. Secure cloud network infrastructure across Microsoft Azure and/or AWS, with strong networking knowledge in TCP/IP, BGP, OSPF, VLANs, DNS, NAT, and packet analysis using Wireshark/tcpdump.
7. Monitor security events and support incident response using Splunk, Microsoft Sentinel, Strata Logging Service, or Cortex Data Lake, including threat detection, investigation, and mitigation.
8. Automate network security operations using Python, REST/XML APIs, Ansible, and Terraform. Manage configuration changes through ServiceNow and support compliance requirements such as ISO 27001, SOX, and NIST CSF.
9. Preferred: PCNSE/PCSAE certification, Zscaler, Cortex XDR/XSOAR, OT/ICS security, and CCNP/CCIE Security or cloud security certifications. Strong troubleshooting, documentation, and communication skills are essential.