Network Security Firewall Palo Alto L3

Network Security L3

Mandatory skills: Palo Alto, Aruba ClearPass. The ideal candidate will have deep experience of security technologies, such as Security, proxy, GNAC, IDS/IPS, routing, switching, managing heterogeneous environment & generate metrics related to Security, Network performance, capacity, availability, failure rates, and will also have a strong background in network performance management, service delivery and strategic operations planning with a strong technical orientation & creative in problem solving.

Required qualifications and experience:

• Bachelor's degree or related qualification
• Certifications is a must (Food and Beverage Client, CCNP Security, CCDP, CCIE Security)
• Minimum 12+ years of working in a Network / Telecommunications role, with expert level experience with Firewall Management and NAC

Hands on experience in managing Palo Alto Firewalls

Expert in working on Panorama with through understanding of device groups and templates. Should have strong exposure in handling large enterprise network setup of Client Aruba ClearPass Management of the complete Client NAC solution such as refinement of policies, creation of policies, configuration optimization or any changes/modifications to be done for enforcing policies, etc Hands-on experience on ClearPass deployment. Solution Designing Good knowledge and hands-on experience on... ClearPass Policy Manager and ClearPass Live Monitoring Posture policies, OnGuard,AD integration, Enforcement Policies Guest and BYOD solution TACACS migration System level configuration (like Clustering, licensing, device insight, certificate management, upgrade, downgrade, Reporting etc) Basic Switching & Routing knowledge. Define global standards, policies, and procedures relating to ClearPass Liaise with hardware vendors and business partners where required to resolve more challenging issues.

Key responsibilities include:

• This is a hands-on technical role:
• Provide tier-3 (expert level) operational support for Firewalls, Proxies, IDS/IPS, NAC to resolve critical business issues that require deep network troubleshooting techniques and performance analysis
• Independently own the Security Infrastructure support solving complex issues and suggest design modifications as appropriate.
• Ensure SLAs are met
• Responsible for performance analysis, proactive troubleshooting and capacity planning for the Security platforms.
• Perform monitoring and maintenance of overall environment working with experienced team members.
• Perform change controls. Update process documentation and team portals
• Participate in troubleshooting, capacity planning and analysis, performance analysis & Root Cause Analysis.
• Communicate with peers and managers regarding system issues & participate in 24x7 on-call.
• Automate operational tasks to make processes simpler and more robust.
• Ability to handle multiple complex tasks in a dynamic environment, with tight deadlines concurrently.
• Submit the RCA within its SLA for all P1/P2s. Undertakes routine and specialized tasks to report on the health of the network infrastructure as & when required.
• Inform about latest patches, OS/application versions, updates, signatures, etc. as and when released by the OEM and evaluating and applying the same as per their applicability
• Configuring automatic incremental and full backup of devices/solution including audit logs, policies, system configurations, user database, element database and any other parameters required to run the solution. Engineer should perform periodic restoration of the backup.
• Reviewing the Checklist Process and ensuring everyone follows the daily checklist, Changes in checklist and update Reviewing the Checklist Process and ensuring everyone follows the daily checklist, Review with L1 Team on checklist, Open Tickets, Internal discussion with L1 Team on RCA, Open Tickets, Compliance Checklist Open the TAC cases with OEM and follow up till closure, RCA Submissions SOP preparation & Timely update of SOP, Guide to L1 Team to follow the SOP.

Additional responsibilities include:

• Oversees the management of service level agreements (SLAs) with vendors and service providers
• Oversees and directs all aspects of the 24/7/365 mission critical network/telecommunication infrastructure operations; including planning, supporting, and maintaining functions
• Serves as the senior-level escalation point for network operations to resolve critical incidents
• Maintains policy and procedures manual, conducts monthly service review meetings with key stakeholders
• Provides leadership, management, direction, and technical oversight for the network Security operations department

1. Working experience in any public ( Azure, GCP, Oracle, Aws or others) or hybrid cloud
2. Experience on Cloud native or third party firewalls on cloud
3. Azure or AWS networking ( NSG, UDR, VPC, VNET, Route63 and others)