SME - Data Loss Prevention,Palo Alto Firewalls
India
Apply now
Job Description
SME - Data Loss Prevention,Palo Alto Firewalls
Others, Karnataka

Job Summary

Candidate should possess over 10 years of experience for the L3 role and have the following skill set. Palo Alto Extensive experience in network administration, security, and architecture. Skilled in analyzing traffic patterns, performing packet captures, and understanding network protocols and applications such as HTTP, HTTPS, SSL, and TLS, as well as internet architecture. Strong background in planning, designing, and implementing infrastructure. Proficient in managing Palo Alto firewalls and log collectors using Panorama, including handling device groups, firewall templates, and template stacks. Adept at troubleshooting and resolving firewall issues efficiently. Responsible for delivering network security services for customers, focusing on firewalls (mainly Palo Alto and Illumio), IPS/IDS, and related solutions. Duties include administering network security devices, defining and managing policies and rules, troubleshooting issues, and performing device upgrades and patch management. Collaborates with Data Center and Network teams to integrate security measures, identify risks, and propose mitigation strategies. Measures and reports on Security Operational SLAs and KPIs, identifies areas for improvement, and develops improvement plans. Experienced in supporting, administering, and upgrading network hardware including firewalls and IDS/IPS, troubleshooting network security and firewall issues, managing external suppliers, and preparing and updating network security documentation. Designs and reviews firewall, VPN, and IDS/IPS installations, responds promptly to security incidents with thorough post-event analysis, updates and upgrades security systems as needed, and coordinates with remote users to install and configure equipment on site. Cisco ISE (Identity Services Engine) • Install, configure, and maintain Cisco ISE solutions to ensure secure network access. • Manage and optimize RADIUS and TACACS+ protocols for effective authentication, authorization, and accounting. • Integrate Cisco ISE with systems like Active Directory and Certificate Authorities to streamline identity management. • Implement and enforce network access control policies for wired, wireless, and VPN environments. • Set up guest access, device profiling, posture assessment, and BYOD policies. • Monitor, troubleshoot, and resolve network access and security issues related to Cisco ISE. • Analyze and address security incidents involving network access. • Develop and maintain comprehensive technical documentation, including configurations, policy records, and SOPs. • Offer ongoing support, recommendations, and training to stakeholders to enhance network security solutions. Zscaler Extensive knowledge of Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) architecture, deployment, policy design, and troubleshooting. Skilled in configuring, optimizing, and resolving issues for ZIA/ZPA across various user profiles, including roaming and branch offices. Comprehensive understanding of Zscaler cloud security features such as CASB, DLP, SSL inspection, threat protection (ATP), and zero trust network access. Strong troubleshooting abilities with user and device authentication methods (SAML, SCIM) and access flows. Experienced in security log analysis, packet capture, Fiddler, HAR files, and performance tuning. Solid grasp of enterprise networking protocols, including GRE, IPSEC, SSL VPN, and internet traffic flow. Hands-on experience with Zscaler inline tools, app connectors, service edges, and diagnostic tools. Good understanding of PKI and certificate management to effectively address user issues.

Key Responsibilities

Candidate should possess over 10 years of experience for the L3 role and have the following skill set. Palo Alto Extensive experience in network administration, security, and architecture. Skilled in analyzing traffic patterns, performing packet captures, and understanding network protocols and applications such as HTTP, HTTPS, SSL, and TLS, as well as internet architecture. Strong background in planning, designing, and implementing infrastructure. Proficient in managing Palo Alto firewalls and log collectors using Panorama, including handling device groups, firewall templates, and template stacks. Adept at troubleshooting and resolving firewall issues efficiently. Responsible for delivering network security services for customers, focusing on firewalls (mainly Palo Alto and Illumio), IPS/IDS, and related solutions. Duties include administering network security devices, defining and managing policies and rules, troubleshooting issues, and performing device upgrades and patch management. Collaborates with Data Center and Network teams to integrate security measures, identify risks, and propose mitigation strategies. Measures and reports on Security Operational SLAs and KPIs, identifies areas for improvement, and develops improvement plans. Experienced in supporting, administering, and upgrading network hardware including firewalls and IDS/IPS, troubleshooting network security and firewall issues, managing external suppliers, and preparing and updating network security documentation. Designs and reviews firewall, VPN, and IDS/IPS installations, responds promptly to security incidents with thorough post-event analysis, updates and upgrades security systems as needed, and coordinates with remote users to install and configure equipment on site. Cisco ISE (Identity Services Engine) • Install, configure, and maintain Cisco ISE solutions to ensure secure network access. • Manage and optimize RADIUS and TACACS+ protocols for effective authentication, authorization, and accounting. • Integrate Cisco ISE with systems like Active Directory and Certificate Authorities to streamline identity management. • Implement and enforce network access control policies for wired, wireless, and VPN environments. • Set up guest access, device profiling, posture assessment, and BYOD policies. • Monitor, troubleshoot, and resolve network access and security issues related to Cisco ISE. • Analyze and address security incidents involving network access. • Develop and maintain comprehensive technical documentation, including configurations, policy records, and SOPs. • Offer ongoing support, recommendations, and training to stakeholders to enhance network security solutions. Zscaler Extensive knowledge of Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) architecture, deployment, policy design, and troubleshooting. Skilled in configuring, optimizing, and resolving issues for ZIA/ZPA across various user profiles, including roaming and branch offices. Comprehensive understanding of Zscaler cloud security features such as CASB, DLP, SSL inspection, threat protection (ATP), and zero trust network access. Strong troubleshooting abilities with user and device authentication methods (SAML, SCIM) and access flows. Experienced in security log analysis, packet capture, Fiddler, HAR files, and performance tuning. Solid grasp of enterprise networking protocols, including GRE, IPSEC, SSL VPN, and internet traffic flow. Hands-on experience with Zscaler inline tools, app connectors, service edges, and diagnostic tools. Good understanding of PKI and certificate management to effectively address user issues.

Skill Requirements

Candidate should possess over 10 years of experience for the L3 role and have the following skill set. Palo Alto Extensive experience in network administration, security, and architecture. Skilled in analyzing traffic patterns, performing packet captures, and understanding network protocols and applications such as HTTP, HTTPS, SSL, and TLS, as well as internet architecture. Strong background in planning, designing, and implementing infrastructure. Proficient in managing Palo Alto firewalls and log collectors using Panorama, including handling device groups, firewall templates, and template stacks. Adept at troubleshooting and resolving firewall issues efficiently. Responsible for delivering network security services for customers, focusing on firewalls (mainly Palo Alto and Illumio), IPS/IDS, and related solutions. Duties include administering network security devices, defining and managing policies and rules, troubleshooting issues, and performing device upgrades and patch management. Collaborates with Data Center and Network teams to integrate security measures, identify risks, and propose mitigation strategies. Measures and reports on Security Operational SLAs and KPIs, identifies areas for improvement, and develops improvement plans. Experienced in supporting, administering, and upgrading network hardware including firewalls and IDS/IPS, troubleshooting network security and firewall issues, managing external suppliers, and preparing and updating network security documentation. Designs and reviews firewall, VPN, and IDS/IPS installations, responds promptly to security incidents with thorough post-event analysis, updates and upgrades security systems as needed, and coordinates with remote users to install and configure equipment on site. Cisco ISE (Identity Services Engine) • Install, configure, and maintain Cisco ISE solutions to ensure secure network access. • Manage and optimize RADIUS and TACACS+ protocols for effective authentication, authorization, and accounting. • Integrate Cisco ISE with systems like Active Directory and Certificate Authorities to streamline identity management. • Implement and enforce network access control policies for wired, wireless, and VPN environments. • Set up guest access, device profiling, posture assessment, and BYOD policies. • Monitor, troubleshoot, and resolve network access and security issues related to Cisco ISE. • Analyze and address security incidents involving network access. • Develop and maintain comprehensive technical documentation, including configurations, policy records, and SOPs. • Offer ongoing support, recommendations, and training to stakeholders to enhance network security solutions. Zscaler Extensive knowledge of Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) architecture, deployment, policy design, and troubleshooting. Skilled in configuring, optimizing, and resolving issues for ZIA/ZPA across various user profiles, including roaming and branch offices. Comprehensive understanding of Zscaler cloud security features such as CASB, DLP, SSL inspection, threat protection (ATP), and zero trust network access. Strong troubleshooting abilities with user and device authentication methods (SAML, SCIM) and access flows. Experienced in security log analysis, packet capture, Fiddler, HAR files, and performance tuning. Solid grasp of enterprise networking protocols, including GRE, IPSEC, SSL VPN, and internet traffic flow. Hands-on experience with Zscaler inline tools, app connectors, service edges, and diagnostic tools. Good understanding of PKI and certificate management to effectively address user issues.

Other Requirements

Candidate should possess over 10 years of experience for the L3 role and have the following skill set. Palo Alto Extensive experience in network administration, security, and architecture. Skilled in analyzing traffic patterns, performing packet captures, and understanding network protocols and applications such as HTTP, HTTPS, SSL, and TLS, as well as internet architecture. Strong background in planning, designing, and implementing infrastructure. Proficient in managing Palo Alto firewalls and log collectors using Panorama, including handling device groups, firewall templates, and template stacks. Adept at troubleshooting and resolving firewall issues efficiently. Responsible for delivering network security services for customers, focusing on firewalls (mainly Palo Alto and Illumio), IPS/IDS, and related solutions. Duties include administering network security devices, defining and managing policies and rules, troubleshooting issues, and performing device upgrades and patch management. Collaborates with Data Center and Network teams to integrate security measures, identify risks, and propose mitigation strategies. Measures and reports on Security Operational SLAs and KPIs, identifies areas for improvement, and develops improvement plans. Experienced in supporting, administering, and upgrading network hardware including firewalls and IDS/IPS, troubleshooting network security and firewall issues, managing external suppliers, and preparing and updating network security documentation. Designs and reviews firewall, VPN, and IDS/IPS installations, responds promptly to security incidents with thorough post-event analysis, updates and upgrades security systems as needed, and coordinates with remote users to install and configure equipment on site. Cisco ISE (Identity Services Engine) • Install, configure, and maintain Cisco ISE solutions to ensure secure network access. • Manage and optimize RADIUS and TACACS+ protocols for effective authentication, authorization, and accounting. • Integrate Cisco ISE with systems like Active Directory and Certificate Authorities to streamline identity management. • Implement and enforce network access control policies for wired, wireless, and VPN environments. • Set up guest access, device profiling, posture assessment, and BYOD policies. • Monitor, troubleshoot, and resolve network access and security issues related to Cisco ISE. • Analyze and address security incidents involving network access. • Develop and maintain comprehensive technical documentation, including configurations, policy records, and SOPs. • Offer ongoing support, recommendations, and training to stakeholders to enhance network security solutions. Zscaler Extensive knowledge of Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) architecture, deployment, policy design, and troubleshooting. Skilled in configuring, optimizing, and resolving issues for ZIA/ZPA across various user profiles, including roaming and branch offices. Comprehensive understanding of Zscaler cloud security features such as CASB, DLP, SSL inspection, threat protection (ATP), and zero trust network access. Strong troubleshooting abilities with user and device authentication methods (SAML, SCIM) and access flows. Experienced in security log analysis, packet capture, Fiddler, HAR files, and performance tuning. Solid grasp of enterprise networking protocols, including GRE, IPSEC, SSL VPN, and internet traffic flow. Hands-on experience with Zscaler inline tools, app connectors, service edges, and diagnostic tools. Good understanding of PKI and certificate management to effectively address user issues.
Apply now
Information at a Glance

Why HCLTech?

At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first.

HCLTech is a global technology company, home to more than 227,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending December 2026 totaled $14.7 billion.
23 Benefits At HCLTech, we believe in empowering our employees with comprehensive benefits that support their professional growth and enhance their well-being. When you sign up for a career with us, you gain access to: https://rmkcdn.successfactors.com/147eb21f/a701dca9-f32d-4fc9-9447-6.svg Industry-benchmarked compensation https://rmkcdn.successfactors.com/147eb21f/b0c54381-ddcc-4a33-9b35-9.svg Best-in-class healthcare benefits https://rmkcdn.successfactors.com/147eb21f/b73027be-7aae-4d36-a090-4.svg Personal time off https://rmkcdn.successfactors.com/147eb21f/d5b4fdfd-2e99-4e26-9878-9.svg Maternity and paternity benefits https://rmkcdn.successfactors.com/147eb21f/3d42b0fc-4652-435a-9ece-c.svg Access to skills / higher education programs/resources https://rmkcdn.successfactors.com/147eb21f/aeddeaf2-9e25-4584-ad11-d.svg Discounts on products and services via Benefit Box https://rmkcdn.successfactors.com/147eb21f/a9609a3b-2700-4b3c-9d90-a.svg Participate in CSR programs and live life with a purpose https://rmkcdn.successfactors.com/147eb21f/c6e33851-710f-4634-bd69-f.svg Opportunities to grow and advance your career Note: The benefits listed above vary depending on the nature of your employment and the country where you work. Some benefits may be available in some countries but not in all.