Infrastructure Engineer

Responsibilities:

• Architect and implement Palo alto policies using App-ID, User-ID, and Content-ID.
• Configure and maintain Panorama for centralized management across multiple firewalls.
• Deploy and manage Global Protect VPN, including split tunnelling, HIP checks, and endpoint posture validation.
• Conduct SSL decryption and URL filtering with custom categories and safe search enforcement.
• Implement Wildfire for advanced malware detection and sandboxing.
• Perform zone-based segmentation and enforce least privilege access across trust boundaries.
• Design and maintain multi-site WAN architecture using BGP, OSPF, and static routing.
• Configure redundant paths with route maps, policy-based routing, and failover logic.
• Manage Layer 2/3 switching, including VLANs, STP, VTP, trunking, and port security.
• Lead network architecture reviews, capacity planning, and futureproofing initiatives
• Create network diagrams, runbooks, and high-level design documents (HLD/LLD).
• Manage end-to-end implementation of network upgrades, firewall migrations, and policy rollouts.
• Coordinate change management with rollback plans and impact assessments.
• Lead cutover events, including pre-checks, live monitoring, and post-deployment validation.
• Analyse traffic logs, session tables, and threat logs for root cause analysis.
• Use tools like Wireshark, SolarWinds, NetFlow, and SNMP traps for diagnostics.
• Tune firewall policies for performance and security, minimizing rule shadowing and redundancy.
• Conduct periodic audits of firewall rules, NAT policies, and routing tables.
• Mentor junior engineers and conduct technical training sessions.
• Interface with vendors for feature enhancements, bug fixes, and roadmap alignment.
• Ensure alignment with business continuity, disaster recovery, and compliance frameworks.

Key Requirements:

• Strong expertise across Palo Alto firewalls and Panorama
• Experience in routing protocols & switching
• Experience in designing, planning & troubleshooting
• Knowledge of AWS, Azure Cloud
• Problem solving and troubleshooting diagnosis skills
• Able to communicate to internal/external clients and must demonstrate documenta on skills.
• An understanding of ITIL processes, including change and incident management.