Job Title

L2 Perimeter Firewall Engineer – Palo AltoLocation: Mumbai / Bangalore / RemoteExperience: 4–7 YearsRole: Network Security / Firewall Operations (L2)Job SummaryThe L2 Perimeter Firewall Engineer is responsible for managing, monitoring, and troubleshooting enterprise firewall infrastructure, particularly Palo Alto Next-Generation Firewalls (NGFW). The role involves handling L2 support incidents, firewall policy changes, VPN troubleshooting, security monitoring, and coordination with L3 teams to maintain a secure network perimeter.Key ResponsibilitiesFirewall AdministrationManage and administer Palo Alto Next-Generation Firewalls (NGFW).Configure and maintain security policies, NAT rules, and access control lists.Perform firewall rule review, optimization, and policy implementation.Implement firmware upgrades, patches, and configuration backups.Incident & Problem ManagementProvide Level-2 support for firewall and network security incidents.Analyze firewall logs and alerts to detect potential security threats.Perform root cause analysis (RCA) and coordinate with L3 teams for complex issues.Participate in P1/P2 incident bridge calls and resolution activities.VPN & Connectivity ManagementConfigure and troubleshoot Site-to-Site VPN and Remote Access VPN (GlobalProtect).Troubleshoot network connectivity issues (HTTP, HTTPS, SSL, routing).Ensure secure communication between data centers, cloud, and branch networks.Security MonitoringMonitor firewall, IPS/IDS, and Anti-DDoS systems.Investigate suspicious traffic and security anomalies.Work with SIEM tools for security event monitoring and correlation.Change & Configuration ManagementImplement firewall changes based on change management processes.Maintain documentation of network diagrams, firewall rules, and security policies.Ensure compliance with security standards and company policies.Required SkillsHands-on experience with Palo Alto Firewall (PAN-OS)Knowledge of NAT, Security Policies, Zones, App-ID, User-IDExperience with VPN (IPSec, SSL VPN / GlobalProtect)Understanding of TCP/IP, Routing, VLANs, DNS, HTTP/HTTPSFirewall troubleshooting using packet capture and logsExperience with IDS/IPS, Anti-DDoS, Web FilteringKnowledge of SIEM tools (Splunk / QRadar / ArcSight)Preferred CertificationsPCNSA / PCNSE (Palo Alto)CCNA / CCNP SecurityCEH or other Cybersecurity certificationsEducationB.E / B.Tech / BCA / MCA in Computer Science / IT / Networking