Security Architect

Project Role : Security Architect
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : Palo Alto Networks Firewalls
Good to have skills : NA
Minimum 5 year(s) of experience is required
Educational Qualification : 15 years full time education

Summary: We are seeking a technically skilled and proactive Network Security Technical Lead to manage and enhance our enterprise security infrastructure. This role focuses on securing the network perimeter through the administration of Palo Alto Firewalls, Web Application Firewalls (WAF), Bot Protection, Email Security, Endpoint Detection and Response (EDR), and IPS/IDS systems. You will be responsible for firewall policy tuning, VPN support, DNS and IDS/IPS signature management, bot defense rule enforcement, and email threat protection. A key part of the role involves proactively identifying and addressing security gaps, ensuring compliance with internal standards, and continuous improvement through regular audits, service reporting, and cross-functional collaboration. Roles & Responsibilities: -Administer and support enterprise firewall systems, with a focus on Palo Alto platforms. -Perform policy tuning and propose enhancements based on incident trends and evolving threat landscapes. -Manage IDS/IPS signature updates, including additions, deletions, and modifications. -Support URL filtering configurations and enforcement. -Provide operational support for VPN services and troubleshoot connectivity issues. -Identify security gaps and recommend remediation strategies as part of continuous improvement. -Conduct quarterly firewall rule audits and generate compliance reports. -Maintain and update operational runbooks and documentation. -Manage patching activities for firewall infrastructure. -Deliver regular service performance reports and participate in incident/problem/change management processes. -Troubleshoot firewall configuration issues, including backup/restore and application break-fixes. -Manage bot protection policies and rules using Cequence. -Configure appropriate logging levels for bot traffic analysis. -Perform troubleshooting and incident support related to bot activity. -Apply and validate standard and emergency rule requests. -Perform regular signature updates to maintain bot defense effectiveness -Fine-tune DNS policies and implement domain-based filtering using Cloudflare. -Monitor and report on DNS threats weekly/monthly, including actions taken. -Ensure DNS configurations align with enterprise security posture and compliance requirements. -Policy tuning, rule optimization, VPN support, and quarterly audit reporting using Palo Alto; incident-driven configuration backup, restore, and break-fix troubleshooting. -Signature lifecycle management (add/update/delete), URL filtering enforcement, and patch management aligned with incident trends and continuous improvement goals. -Policy and rule management, logging configuration, incident triage, and signature updates using Cequence Bot Defense; validation of standard and emergency rule requests. -DNS policy fine-tuning, domain-based filtering, and weekly/monthly threat reporting using Cloudflare DNS. -Service reporting, runbook maintenance, and change/problem/incident management across firewall and bot/DNS security layers. -Palo Alto, Cequence (Bot Defense), Cloudflare (DNS). Professional & Technical Skills: -Strong hands-on experience with Palo Alto firewalls and associated security features. -Proficiency with Cequence for Bot protection and Cloudflare for DNS security. -Solid understanding of network security principles, VPNs, IDS/IPS, and URL filtering. -Familiarity with ITIL-based incidents, problems, and change management processes. -Ability to analyze logs and traffic patterns to identify anomalies and optimize rules. -Experience with patch management, service reporting, and compliance audits. -Strong documentation skills and attention to detail. -Strong hands-on experience with Palo Alto firewalls and associated security features. -Proficiency with Cequence for Bot protection and Cloudflare for DNS security. -Solid understanding of network security principles, VPNs, IDS/IPS, and URL filtering. -Familiarity with ITIL-based incidents, problems, and change management processes. -Ability to analyze logs and traffic patterns to identify anomalies and optimize rules. -Experience with patch management, service reporting, and compliance audits. Additional Information: - The candidate should have minimum 5 years of experience in Palo Alto Networks Firewalls. - This position is based at our Gurugram office. - A 15 years full time education is required.