[Hiring] Network Security Engineer @Infosys Limited

Role Description

The Network Security Engineer is responsible for the design, deployment, and operations of Telco-grade Virtual Firewalls (vFW) using Palo Alto technologies within Telco cloud (NFV/SDN) environments. This role ensures secure traffic segmentation, high availability, and scalable firewall deployments supporting carrier-grade networks, VNF architectures, and multi-tenant Telco environments.

Key Responsibilities

• Telco Virtual Firewall (Palo Alto) Operations
  • Deploy, configure, and manage Palo Alto Virtual Firewalls (VM-Series / CN-Series) in Telco cloud.
  • Configure security policies (App-ID, URL filtering, NAT, segmentation).
  • Implement threat prevention (IPS, Anti-malware, WildFire).
  • Perform log analysis, traffic inspection, and threat detection.
  • Ensure policy enforcement across Telco network segments and trust zones.
• Telco Cloud / NFV Security Implementation
  • Deploy firewalls as Virtual Network Functions (VNFs) in Telco cloud environments.
  • Integrate with NFV orchestrators / SDN controllers and Telco cloud platforms (OpenStack / Kubernetes).
  • Ensure secure communication between VNFs and controlled access using IP/Port/Application-level filtering.
• Traffic Engineering & Connectivity Security
  • Configure and manage routing protocols (BGP, static routing) and VPNs (IPSec, site-to-site connectivity).
  • Perform deep packet inspection (DPI) and traffic flow analysis.
  • Secure north-south and east-west traffic flows in Telco networks.
• High Availability & Carrier-Grade Design
  • Implement HA (active-active / active-passive) setups for virtual firewalls.
  • Support geo-redundant deployments and fault-tolerant designs aligned to Telco standards.
  • Ensure no service impact from VNF/node/site failures.
• Monitoring, Incident & Change Management
  • Monitor firewall health, logs, and alerts.
  • Perform L2/L3 troubleshooting for high-severity incidents.
  • Execute change, incident, and problem management (ITIL aligned).
  • Collaborate with NOC, SOC, and Telco operations teams.
• Governance, Compliance & Security Assurance
  • Ensure firewall configurations meet Telco security standards (ETSI / NFV guidelines) and enterprise compliance requirements.
  • Support audits with logs, reports, and evidence.
  • Perform policy optimization, cleanup, and compliance validation.

Qualifications

• Hands-on experience with Palo Alto Virtual Firewalls (VM-Series / CN-Series).
• Experience with Panorama for centralized firewall management.
• Strong knowledge of NGFW features (App-ID, User-ID, Content-ID, IPS).
• Experience in Telco cloud / NFV environments and virtual firewall deployments at scale.
• Understanding of VNF lifecycle and orchestration, SDN-based network security.
• Strong understanding of TCP/IP, BGP, routing, NAT, network segmentation, and Zero Trust.
• Experience with VPNs (IPSec, SSL VPN) and traffic analysis and debugging.

Requirements

• Experience with multi-vendor Telco firewalls.
• Familiarity with Kubernetes / container security (CN-Series).
• Automation skills in Python / Ansible / REST APIs.
• Exposure to 5G / LTE network security and cloud-native security controls.

Certifications (Preferred)

• Palo Alto: PCNSE / PCNSA.
• Network / Telco: CCNP / CCIE (Security or Service Provider).
• Cloud / Telco: NFV / Telco cloud certifications (optional).

Soft Skills

• Strong troubleshooting and analytical skills.
• Ability to operate in high pressure, carrier-grade environments.
• Effective collaboration across global teams (NOC, SOC, Engineering).
• Strong communication for client and stakeholder engagement.

Key Outcomes / Success Metrics

• High availability of Telco firewall services (carrier-grade SLAs).
• Secure segmentation and traffic isolation across VNFs.
• Reduction in security incidents and faster RCA.
• Improved policy compliance and audit readiness.