Senior Infrastructure Engineer

Overview

Senior Firewall Engineer (Level 3) providing expert-level technical engineering and design for enterprise network security infrastructure, handling complex firewall deployments, tier-3 troubleshooting, and advanced cloud firewall capabilities.

What you'll do

• Serve as a senior technical engineer within the Network Security Platform team, delivering secure, scalable, and highly available firewall solutions across global environments.
• Design, deploy, and support Palo Alto NGFW, Panorama, Cloud NGFW, and Prisma Access solutions while ensuring adherence to architectural standards and security best practices.
• Lead complex Tier-3 troubleshooting involving network connectivity, application flows, security policy enforcement, SSL decryption, routing, and cloud integrations.
• Develop production-grade technical documentation, including High-Level Designs (HLDs), Low-Level Designs (LLDs), implementation plans, operational runbooks, and Root Cause Analysis (RCA) reports.
• Design and implement Firewall-as-Code capabilities leveraging Git-based workflows, Infrastructure-as-Code principles, APIs, and automation frameworks.
• Build and maintain Python-based automation solutions to automate firewall policy management, configuration deployment, compliance validation, and operational workflows.
• Develop reusable automation modules, frameworks, and self-service capabilities that reduce manual effort and improve engineering efficiency.
• Integrate firewall platforms with enterprise systems including ITSM, CMDB, observability, and orchestration platforms through API-driven automation.
• Implement Policy-as-Code and automated validation frameworks to improve change quality and deployment consistency.
• Contribute to Infrastructure-as-Code implementations using Terraform, Ansible, and related automation technologies.
• Build and support CI/CD pipelines for firewall policy deployment, platform configuration management, and security automation workflows.
• Participate in code reviews, testing, release management, and engineering governance processes to maintain high-quality engineering standards.
• Collaborate with platform engineering teams to integrate network security capabilities into enterprise DevSecOps pipelines.
• Support Zero Trust initiatives through network segmentation, identity-aware security policies, micro-segmentation, and secure access architectures.
• Evaluate and implement cloud-native security services, SASE/SSE technologies, and emerging cloud firewall capabilities.

What you'll need

• 5+ years of experience in Network Security Engineering with demonstrated expertise in enterprise-scale network security environments.
• Deep hands-on expertise with Palo Alto Networks NGFW, Panorama, Log Collectors, Device Groups, Template Stacks, and enterprise firewall architectures.
• Strong understanding of enterprise networking fundamentals including routing, switching, TCP/IP, DNS, DHCP, WAN, cloud networking, and application traffic flows.
• Hands-on experience with Cloud NGFW, Prisma Access (SASE/SSE), and modern cloud-delivered security platforms.
• Experience designing and supporting SSL/TLS decryption solutions at scale, with an understanding of privacy and regulatory requirements including GDPR, DPDP, and CCPA.
• Experience with Network Access Control platforms such as Cisco ISE, including TACACS+, RADIUS, posture assessment, profiling, and identity-based access controls.
• Strong understanding of Zero Trust principles, identity-aware security policies, network segmentation, and micro-segmentation strategies.
• Advanced troubleshooting capabilities including packet captures, session analysis, flow analysis, log correlation, performance troubleshooting, and root cause analysis.
• Experience integrating firewall telemetry and operational data with Panorama, Splunk, SIEM platforms, and enterprise observability solutions.
• Strong proficiency in Python development for automation, API integrations, workflow orchestration, and operational tooling.
• Experience working with REST APIs, JSON, YAML, and API-driven infrastructure automation.
• Proficiency with Git-based development workflows including branching strategies, pull requests, code reviews, and version control best practices.
• Hands-on experience with automation technologies such as Ansible, Terraform, and Infrastructure-as-Code methodologies.
• Experience building and supporting CI/CD pipelines using GitHub Actions, Jenkins, Azure DevOps, GitLab CI, or similar technologies.
• Understanding of software development lifecycle (SDLC), testing methodologies, release management, and engineering best practices.
• Experience building reusable automation services, engineering tools, and platform capabilities that improve operational efficiency and engineering productivity.
• Understanding of Firewall-as-Code, Policy-as-Code, and Infrastructure-as-Code concepts and implementation patterns.
• Experience leveraging telemetry, monitoring, and observability platforms to improve operational visibility and platform reliability.
• Strong understanding of service health monitoring, alerting strategies, troubleshooting workflows, and operational analytics.

Nice to have

• PCNSE / CCNP security certification
• CCNA Routing & Switching certification
• Any cloud provider certification
• Coding language (other than Python, Ansible, if any)