[Hiring] Network Security Engineer @Infosys

Role Description

The Network Security Engineer is responsible for the design, deployment, and operations of Telco-grade Virtual Firewalls (vFW) using Palo Alto technologies within Telco cloud (NFV/SDN) environments. This role ensures secure traffic segmentation, high availability, and scalable firewall deployments supporting carrier-grade networks, VNF architectures, and multi-tenant Telco environments.

Key Responsibilities

• Telco Virtual Firewall (Palo Alto) Operations
  • Deploy, configure, and manage Palo Alto Virtual Firewalls (VM-Series / CN-Series) in Telco cloud
  • Configure security policies (App-ID, URL filtering, NAT, segmentation)
  • Implement threat prevention (IPS, Anti-malware, WildFire)
  • Perform log analysis, traffic inspection, and threat detection
  • Ensure policy enforcement across Telco network segments and trust zones
• Telco Cloud / NFV Security Implementation
  • Deploy firewalls as Virtual Network Functions (VNFs) in Telco cloud environments
  • Integrate with NFV orchestrators / SDN controllers
  • Ensure secure communication between VNFs
  • Control access using IP/Port/Application-level filtering
• Traffic Engineering & Connectivity Security
  • Configure and manage routing protocols (BGP, static routing)
  • Manage VPNs (IPSec, site-to-site connectivity)
  • Perform deep packet inspection (DPI) and traffic flow analysis
  • Secure north-south and east-west traffic flows in Telco networks
• High Availability & Carrier-Grade Design
  • Implement HA (active-active / active-passive) setups for virtual firewalls
  • Support geo-redundant deployments
  • Design fault-tolerant systems aligned to Telco standards
  • Ensure no service impact from VNF/node/site failures
• Monitoring, Incident & Change Management
  • Monitor firewall health, logs, and alerts
  • Perform L2/L3 troubleshooting for high-severity incidents
  • Execute change, incident, and problem management (ITIL aligned)
  • Collaborate with NOC, SOC, and Telco operations teams
• Governance, Compliance & Security Assurance
  • Ensure firewall configurations meet Telco security standards (ETSI / NFV guidelines)
  • Support enterprise compliance requirements
  • Assist audits with logs, reports, and evidence
  • Perform policy optimization, cleanup, and compliance validation

Qualifications

• Hands-on experience with Palo Alto Virtual Firewalls (VM-Series / CN-Series)
• Experience with Panorama for centralized firewall management
• Strong knowledge of NGFW features (App-ID, User-ID, Content-ID, IPS)
• Experience in Telco cloud / NFV environments
• Understanding of VNF lifecycle and orchestration
• Strong understanding of TCP/IP, BGP, routing, NAT
• Experience with VPNs (IPSec, SSL VPN)

Requirements

• Experience with multi-vendor Telco firewalls
• Familiarity with Kubernetes / container security (CN-Series)
• Knowledge of automation tools: Python / Ansible / REST APIs
• Exposure to 5G / LTE network security
• Understanding of cloud-native security controls

Certifications (Preferred)

• Palo Alto: PCNSE / PCNSA
• Network / Telco: CCNP / CCIE (Security or Service Provider)
• Cloud / Telco: NFV / Telco cloud certifications (optional)

Soft Skills

• Strong troubleshooting and analytical skills
• Ability to operate in high pressure, carrier-grade environments
• Effective collaboration across global teams (NOC, SOC, Engineering)
• Strong communication for client and stakeholder engagement

Key Outcomes / Success Metrics

• High availability of Telco firewall services (carrier-grade SLAs)
• Secure segmentation and traffic isolation across VNFs
• Reduction in security incidents and faster RCA
• Improved policy compliance and audit readiness