Network Security Engineer

Job description

Role Summary

The Network Security Engineer is responsible for design, deployment, and operations of Telco-grade Virtual Firewalls (vFW) using Palo Alto technologies within Telco cloud (NFV/SDN) environments . This role ensures secure traffic segmentation, high availability, and scalable firewall deployments supporting carrier-grade networks, VNF architectures, and multi-tenant Telco environments .

Key Responsibilities

• Telco Virtual Firewall (Palo Alto) Operations
• Deploy, configure, and manage Palo Alto Virtual Firewalls (VM-Series / CN-Series) in Telco cloud Configure: Security policies (App-ID, URL filtering, NAT, segmentation) Threat prevention (IPS, Anti-malware, WildFire)
• Perform log analysis, traffic inspection, and threat detection
• Ensure policy enforcement across Telco network segments and trust zones
• Telco Cloud / NFV Security Implementation Deploy firewalls as Virtual Network Functions (VNFs) in Telco cloud environments Integrate with: NFV orchestrators / SDN controllers Telco cloud platforms (OpenStack / Kubernetes)

Ensure

Secure communication between VNFs Controlled access using IP/Port/Application-level filtering

Traffic Engineering & Connectivity Security Configure and manage

• Routing protocols (BGP, static routing) VPNs (IPSec, site-to-site connectivity) Perform deep packet inspection (DPI) and traffic flow analysis Secure north-south and east-west traffic flows in Telco networks
• High Availability & Carrier-Grade Design Implement HA (active-active / active-passive) setups for virtual firewalls Support: Geo-redundant deployments Fault-tolerant designs aligned to Telco standards Ensure no service impact from VNF/node/site failures
• Monitoring, Incident & Change Management Monitor firewall health, logs, and alerts Perform L2/L3 troubleshooting for high-severity incidents Execute change, incident, and problem management (ITIL aligned) Collaborate with NOC, SOC, and Telco operations teams
• Governance, Compliance & Security Assurance
• Ensure firewall configurations meet: Telco security standards (ETSI / NFV guidelines) Enterprise compliance requirements
• Support audits with logs, reports, and evidence
• Perform policy optimization, cleanup, and compliance validation Mandatory Skills

Core Technical Skills

Hands-on experience with: Palo Alto Virtual Firewalls (VM-Series / CN-Series)

Panorama for centralized firewall management

• Strong knowledge of: NGFW features (App-ID, User-ID, Content-ID, IPS) Firewall policy design and segmentation Telco / Cloud Exposure Experience in: Telco cloud / NFV environments Virtual firewall deployments at scale Understanding of: VNF lifecycle and orchestration SDN-based network security

Networking Fundamentals

• Strong understanding of: TCP/IP, BGP, routing, NAT Network segmentation and Zero Trust Experience with: VPNs (IPSec, SSL VPN) Traffic analysis and debugging Desired / Good-to-Have Skills Experience with: Multi-vendor Telco firewalls Kubernetes / container security (CN-Series)

Automation

Python / Ansible / REST APIs Exposure to: 5G / LTE network security Cloud-native security controls Certifications (Preferred)

Palo Alto

PCNSE / PCNSA Network / Telco: CCNP / CCIE (Security or Service Provider)

Cloud / Telco

NFV / Telco cloud certifications (optional) Soft Skills

• Strong troubleshooting and analytical skills
• Ability to operate in high pressure, carrier-grade environments Effective collaboration across global teams (NOC, SOC, Engineering)
• Strong communication for client and stakeholder engagement Key Outcomes / Success Metrics High availability of Telco firewall services (carrier-grade SLAs) Secure segmentation and traffic isolation across VNFs Reduction in security incidents and faster RCA Improved policy compliance and audit readiness

About Infosys Infosys is a global leader in next-generation digital services and consulting. We enable clients in 46 countries to navigate their digital transformation. With over three decades of experience in managing the systems and workings of global enterprises, we expertly steer our clients through the many next of their digital journey. We do it by enabling the enterprise with an AI-powered core that helps prioritize the execution of change.

We also empower the business with agile digital at scale to deliver unprecedented levels of performance and customer delight. Our always-on learning agenda drives their continuous improvement through building and transferring digital skills, expertise and ideas from our innovation ecosystem. Visit www.infosys.com to see how Infosys can help your enterprise navigate your next. All aspects of employment at Infosys are based on merit, competence and performance.

We are committed to embracing diversity and creating an inclusive environment for all employees. Infosys is proud to be an equal opportunity employer