Lead Infrastructure Security Specialist (Palo Alto & Prisma Access)

Company: Zensar

Location: Pune (Hybrid)

Experience: 8+ Years

Notice Period: Immediate Joiners Only

Shift: UK Shift Mandatory & Non-Negotiable Requirements

Please Apply ONLY If You Meet The Following Criteria

• 8+ years of experience in Network & Infrastructure Security.
• Hands-on Implementation & Deployment experience with Palo Alto Prisma Access (SASE) (Pure support profiles will not be considered).
• Direct implementation experience in Remote Networks (RN), Mobile Users (MU – GlobalProtect), and Service Connections (SC).
• Ability to join Immediately.

About The Role We are seeking an experienced

Infrastructure Security Specialist to design, implement, and migrate secure network infrastructures for our banking and financial services clients. This role focuses on firewall and proxy transformation to the cloud, leveraging technologies like Palo Alto, Prisma Access, and SD-WAN integration, while ensuring strict compliance with regulatory standards. Core Skill Set

• Palo Alto NGFW + Panorama (Management & Operations)
• Prisma Access / Prisma SASE (End-to-end deployment)
• GlobalProtect VPN (Deployment and onboarding)
• IPSec VPN & Traffic Routing (BGP experience preferred) Key Responsibilities
• Migration & Transformation: Lead and execute network security transformation projects (migrating physical/virtual firewalls and on-prem proxies to cloud-native/SASE models).
• Architecture & Deployment: Design and implement secure architectures across on-prem and cloud environments (AWS/Azure). Deploy and manage Palo Alto firewalls and Prisma Access solutions.
• Network & Policy Management: Configure and manage network security policies, NAT, VPNs (IPSec/SSL), and segmentation. Perform rule optimization and policy cleanup during migrations.
• Strategy & Documentation: Develop migration strategies, runbooks, rollback plans, and validation procedures. Maintain detailed documentation to support audit requirements.
• Compliance & Collaboration: Ensure strict compliance with banking regulatory standards and risk assessments. Collaborate with cloud, network, and application teams.
• Operations: Support cutover activities (including scheduled off-hours deployments) and conduct post-migration validation, hardening, and performance tuning.

Required Technical Skills & Experience

• Strong hands-on experience with Next-Gen Firewalls (NGFW) (Palo Alto) and Proxy technologies (Zscaler, Blue Coat/Symantec, etc.).
• Deep understanding of threat prevention, IDS/IPS, URL filtering, and basic DLP.
• Proven experience in legacy-to-cloud security transformation, rule recertification, and risk mitigation strategies.
• Familiarity with ITIL processes (Change, Incident, and Problem Management) within a managed services/IT services environment.
• Experience working with highly regulated banking/financial clients and supporting regulatory audits.

Preferred Qualifications

• Certifications: Palo Alto (PCNSE), CCNP Security / CCIE Security, or Cloud Security certifications (AWS/Azure).
• Automation: Experience with Python, Ansible, or Terraform is a strong plus. Soft Skills
• Exceptional client and stakeholder communication.
• Proven ability to manage high-risk migration projects calmly and analytically.
• Comfortable working in multi-client, SLA-driven environments. Skills: access,risk,globalprotect vpn (deployment and onboarding),infrastructure security,transformation,prisma access / prisma sase (end-to-end deployment),alto,ipsec vpn & traffic routing (bgp experience preferred),infrastructure,management,palo alto ngfw + panorama (management & operations),cloud,firewalls,security