Experienced Network Consultant / Principal Engineer to lead network security engineering for a strategic US-based client. This role demands strong technical expertise in enterprise network security and routing, Data Center Architecture and the ability to architect, optimize, and support complex global infrastructures.
The ideal candidate will act as a trusted Network and Security consultant, collaborate with cross-functional stakeholders, and drive high-impact network initiatives independently that enhance security, scalability, and performance.
Responsibilities include:
- Act as the network security expert for a critical enterprise environment.
- Architect, design, and optimize secure network infrastructures aligned with industry best practices.
- Lead network redesign, transformation, and optimization initiatives for Data Center transformation.
- Develop and maintain HLD and LLD design documentation, including change records.
- Partner with security, engineering, operations, and business teams to ensure successful project delivery.
- Engage directly with clients in technical meetings to discuss and support network changes, projects, major initiatives, and incident management.
- Ensure infrastructure meets security and compliance standards (e.g., PCI).
- Proactively identify risks, performance bottlenecks, and scalability challenges.
- Drive technology refresh programs and manage firmware lifecycle updates.
- Ensure network performance optimization and operational excellence.
- Maintain clear documentation of architecture, processes, and operational procedures.
- Provide flexible coverage aligned with US business hours.
Academic:
- Graduate Degree in computer science, or a related field.
Technical Certifications
- Mandatory:
- PCNSE (Palo Alto Networks Certified Network Security Engineer)
- Preferred:
- CCIE or CCNP
Essential Skills:
- Expert-level experience with Palo Alto products, including NGFW, Panorama, Log Collector, Global Protect, and Prisma.
- Advanced knowledge of BGP, MPLS, and SD-WAN, including its peer configuration with Palo Alto Firewalls and large-scale deployments.
- Strong command of BGP attributes, traffic engineering, route optimization, and secure architecture design.
- Proven experience implementing advanced routing within Palo Alto environments.
- Deep expertise in NAT, IPSec VPN, and zero-trust security principles.
- Hands-on experience with F5 Big-IP modules (LTM, ASM, GTM) and Citrix NetScaler.
- Experience with Cisco ISE for network authentication and access control.
- Strong foundation in wireless, routing, and switching technologies.
- Data Center redesign/new setup and migration projects involving multiple vendors.
Work Products:
- Palo Alto NGFW, Panorama, Global Protect, Prisma, F5 Big-IP LTM, Cisco ISE.
