Security Architect

Project Role : Security Architect

Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.

Must have skills : Network Security Operations

Good to have skills : NA
Minimum 3 year(s) of experience is required

Educational Qualification : 15 years full time education

Summary:
We are seeking a Network Security Engineer with 6 years of experience across enterprise network security platforms and security automation. The role requires hands-on expertise with Zscaler ZIA/ZPA, Palo Alto NGFW, Prisma SASE, and Cisco ISE alongside proven ability to automate operations through scripting, API integration, and infrastructure-as-code. The candidate will reduce manual toil, accelerate policy deployment, and enforce configuration consistency at scale across hybrid environments.



Roles Responsibilities:

Administer and operate Zscaler ZIA and ZPA manage SSL inspection, URL/content filtering, DLP policies, app connectors, and ZTNA access policies integrate with IdP via SAML/SCIM.

Deploy, manage, and tune Palo Alto NGFW (PA-Series / VM-Series) and Panorama maintain App-ID, User-ID, Security Profiles (Threat Prevention, WildFire, URL Filtering), HA configurations, and PAN-OS lifecycle management.

Operate Prisma SASE manage SD-WAN policy, SSE controls, remote access, and unified security policy enforcement across branch, mobile, and cloud workloads.

Administer Cisco ISE for NAC manage 802.1X wired/wireless authentication, MAB, guest access, TrustSec SGT tagging, posture assessment, and RADIUS/TACACS+ policies integrate with Active Directory and MFA providers.

Build and maintain automation using Python, Ansible, and Terraform automate firewall rule deployment, ISE policy provisioning, Zscaler configuration management, and compliance enforcement via platform REST APIs (PAN-OS API, Zscaler API, Cisco ISE ERS API).

Develop and maintain CI/CD pipeline integrations for network security policy changes enforce peer review, automated validation, and audit-ready change tracking using Git-based workflows.

Automate operational tasks including configuration backups, drift detection, policy compliance reporting, and alert-driven remediation using AWS Lambda, Ansible playbooks, or equivalent tooling.

Investigate and resolve escalated L2/L3 incidents - authentication failures, policy mismatches, tunnel failures, and traffic anomalies - within agreed SLAs.

Perform root cause analysis for major incidents document findings, coordinate remediation across network, cloud, and application teams, and track corrective actions to closure.

Produce operational reports covering incident trends, automation coverage, policy changes, posture metrics, and SLA performance for management and audit audiences.

Professional Technical Skills:

Zscaler ZIA and ZPA SSL inspection, DLP, URL filtering, app connector deployment, ZTNA policy, and IdP integration (Azure AD / Okta).

Palo Alto NGFW Panorama App-ID, User-ID, Security Profiles, WildFire, HA, and PAN-OS upgrades.

Prisma SASE SD-WAN, SSE, remote access policy, and unified security policy management.

Cisco ISE 802.1X NAC, MAB, TrustSec, posture, RADIUS/TACACS+, and AD integration.

Automation scripting Python and Ansible for network security operations REST API integration with PAN-OS, Zscaler, and Cisco ISE APIs.

Infrastructure-as-Code Terraform for network security resource management and policy-as-code enforcement.

CI/CD pipeline experience Git-based workflows (GitHub Actions or GitLab CI) for policy change management and automated validation.

Network fundamentals TCP/IP, DNS, BGP/OSPF, IPsec/SSL VPN, SD-WAN, and traffic analysis.

Incident and problem management ITIL-aligned processes, ITSM tooling (ServiceNow or equivalent), RCA documentation.

Preferred Certifications

Palo Alto PCNSE (Palo Alto Networks Certified Network Security Engineer)

Zscaler ZCCA-IA or ZCCA-PA

Prisma SASE Certification (PCSAE)

Cisco CCNP Security

HashiCorp Terraform Associate

ITIL Foundation v4

The candidate should have minimum 3 years of experience in Network Security Operations.

This position is based at our Bengaluru office.

A 15 years full time education is required.

Qualification 15 years full time education