Principal Network Security Engineer – Palo Alto & Cisco SD-WAN

Anagh Technologies Inc is seeking an experienced Principal Network Security Engineer with deep expertise in Palo Alto Networks Firewalls, Cisco Viptela SD-WAN, and Google Cloud Platform (GCP). This role will lead the design, implementation, and support of enterprise network security solutions across hybrid cloud and on-premises environments.

Responsibilities:

• Design, implement, and maintain Palo Alto Networks firewalls across cloud and on-premises environments
• Deploy and operationalize Palo Alto firewall solutions within Google Cloud Platform (GCP)
• Design and implement Cisco Viptela SD-WAN architecture connecting GCP hubs with on-premises data centers and branch offices
• Establish secure hybrid-cloud connectivity using SD-WAN technologies
• Configure and manage firewall policies, NAT, VPNs, security zones, and segmentation
• Perform firewall upgrades, patching, lifecycle management, and configuration optimization
• Review and remediate obsolete or overly permissive firewall rules
• Troubleshoot complex network, firewall, and cloud connectivity issues
• Participate in incident response, root cause analysis, and security investigations
• Develop automation using Python, Terraform, Ansible, or similar scripting tools
• Collaborate with cloud, infrastructure, networking, and security teams to deliver secure enterprise solutions
• Document architecture, standards, and implementation procedures

Requirements:

• 10+ years of experience in Network Security and Firewall Engineering
• Strong hands-on experience with Palo Alto Networks Firewalls and Panorama
• Proven experience deploying and supporting Palo Alto Firewalls in GCP and hybrid cloud environments
• Extensive experience designing and implementing Cisco Viptela SD-WAN solutions
• Strong understanding of cloud networking, routing, VPNs, NAT, security segmentation, and hybrid-cloud architecture
• Experience designing hub-and-spoke network topologies
• Expertise in BGP, OSPF, IPsec, SD-WAN transport technologies, and dynamic routing
• Hands-on experience with Python, Terraform, Ansible, or similar automation tools
• Strong architecture, design, troubleshooting, and problem-solving skills
• Ability to independently lead enterprise infrastructure projects
• Experience with ROPES is required
• Palo Alto PCNSA or PCNSE Certification
• Cisco SD-WAN/Viptela Certification
• Experience with enterprise-scale and highly regulated environments
• Knowledge of Infrastructure as Code (IaC) and cloud automation frameworks
• Experience with cloud-native security architectures in GCP