Senior Firewall Engineer (Palo Alto / Check Point)

Roles & Responsibilities

1. Commission and implement multiple network security and firewall solutions

2. Integrate solutions with management and authentication tools like email, AD, IAM, and SIEM

3. Manage policies and exceptions across multiple firewall consoles

4. Perform packet capture, analysis, and troubleshooting across all layers of the OSI model

5. Handle incident, problem, service request, change, configuration, and capacity management

6. Proactively utilize network monitoring tools to isolate events and support incident analysis

7. Conduct daily performance checks, periodic audits, and compliance reviews

8. Design and implement network security solutions for DC/DR/Cloud and branch office environments

9. Coordinate with OEMs for TAC support, RMA, replacement, and reconfiguration

10. Guide, lead, and mentor the L1 engineers team

11. Create technical documentation, SOPs, run books, and as-built network diagrams

12. Automate and integrate tools using REST API/SDK with security dashboards

Ideal Candidate

1Strong Firewall / Network Security Profile with hands-on multi-vendor troubleshooting depth (not monitoring)

2Mandatory (Experience 1): Must have 3+ years of hands-on experience on multiple firewall / network-security solutions (Palo Alto, Check Point, Cisco ASA, Fortinet / FortiGate), proficient across multiple firewall consoles.

3Mandatory (Experience 2): Must have hands-on experience commissioning and implementing multiple firewall / network-security solutions and integrating them with management and authentication / authorization tools (email, AD, IAM, SIEM).

4Mandatory (Experience 3): Must have designed and implemented network security solutions for DC / DR / Cloud and branch-office environments.

5Mandatory (Tech skill 1): Must have strong conceptual knowledge of networking and network security, experience across Windows / Linux / Unix, and hands-on packet capture and analysis (Wireshark / pcap) with troubleshooting across OSI Layers 1–7.

6Mandatory (Tech skill 2): Must have experience managing policies and exceptions, and incident / problem / service-request / change / configuration / capacity management, using network monitoring tools to isolate events before service degradation.

7Mandatory (Tech skill 3): Must have experience automating and integrating tools via REST API / SDK with security dashboards and Infosec tools (AD, IDAM, PAM, SIEM, SOAR)

8Mandatory (Experience 4): Must have experience investigating, isolating, and resolving incidents with RCA, coordinating helpdesk / IT / application teams on high-severity incidents, and ensuring ticket closure within SLA with SLA reporting.

9Mandatory (Experience 5): Must have OEM coordination experience (TAC, RMA, replacement, reconfiguration), patch updates / upgrades per bank compliance and audit requirements, timely closure of compliance / audit points, daily performance checks, and periodic audits.

10Mandatory (Skill): Must be able to create technical documentation, as-built diagrams, inventory / security documentation, SOPs / runbooks, and maintain the ITSM knowledge base.

11Mandatory (Leadership): Must be able to guide, lead, and mentor a junior (L1) team, and set expectations for ad hoc activities with the client SPOC.

12Mandatory (Communication): Must have exceptional verbal and written communication skills, with a strong sense of ownership and a demonstrated ability to solve complex issues under pressure.

13Mandatory (Domain): Banking-industry experience preferred; strong candidates with the same technical experience from another industry are acceptable.

14Mandatory (Note): Must be comfortable with a 24/7 NOC rotational shift environment at the client site (IDFC Bank, Airoli, Navi Mumbai), able to work in a fast-paced

15Preferred (Certification): Product certification in Palo Alto, Check Point, Cisco ASA, or Fortinet