Security Architect

Project Role : Security Architect
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : Palo Alto Networks Firewalls
Good to have skills : NA
Minimum 7.5 year(s) of experience is required
Educational Qualification : 15 years full time education

Summary:
Responsible for leading firewall and network security delivery for assigned projects or modules with a primary focus on Palo Alto Networks and Cisco ISE. Provides technical leadership, manages a small to mid-sized team, collaborates with cross-functional teams, and supports day-to-day operations, escalations, and client commitments under the guidance of senior leadership.

Roles & Responsibilities:
-Lead implementation and operational support of Palo Alto Next-Generation Firewalls in enterprise environments.
-Configure and manage firewall security policies, NAT rules, App-ID, User-ID, and content security features.
-Support centralized firewall management using Panorama including policy updates and health monitoring.
-Support implementation and operations of Prisma SASE for cloud-delivered security use cases.
-Implement and support Cisco ISE for Network Access Control including 802.1X, MAB, RADIUS, and TACACS+.
-Integrate Cisco ISE with Active Directory and certificate-based authentication mechanisms.
-Apply Zero Trust principles through identity-based access control and posture assessment.
-Act as a technical escalation point for firewall and ISE-related incidents and service requests.
-Manage and guide firewall security engineers, including task allocation and day-to-day technical support.
-Collaborate with SOC, Network, Cloud, Infrastructure, and Service Management teams to ensure smooth delivery.
-Participate in client calls, technical discussions, and service reviews as required.
-Ensure platform availability, capacity monitoring, and basic high-availability support.
-Maintain operational documentation, SOPs, and runbooks for firewall and NAC services.
-Ensure compliance with ITSM processes including incident, change, and problem management.
-Support audits, firewall rule reviews, and security improvement initiatives within defined scope.
-Ensure SLA adherence and timely resolution of issues within assigned services.


Professional & Technical Skills:
-Strong hands-on experience with Palo Alto Networks firewalls including NGFW, Panorama, and Prisma SASE.
-Hands-on experience with Cisco ISE including NAC configuration and troubleshooting.
-Experience supporting HLD and LLD documentation and security designs.
-Basic exposure to Azure Web Application Firewall in cloud or hybrid environments.
-Good understanding of networking fundamentals such as TCP/IP, routing, VPNs, VLANs, NAT, and segmentation.
-Experience with firmware upgrades, configuration backups, and restore activities.
-Working knowledge of ITSM processes and managed services delivery.
-Working knowledge of UNIX, Linux, and Windows environments.
-Ability to work independently on assigned responsibilities under overall delivery governance
Must have skills : Palo Alto Networks (NGFW, Panorama, Prisma SASE) and Cisco ISE
Good to have skills : Azure Web Application Firewall (WAF)



Additional Information:
- The candidate should have minimum 7.5 years of experience in Palo Alto Networks Firewalls.
- This position is based at our Bengaluru office.
- A 15 years full time education is required.