Principal Network Security Engineer with Cloud– Palo Alto & Cisco SD-WAN

Anagh Technologies Inc is seeking a Principal Network Security Engineer with extensive experience in Palo Alto Networks and Cisco SD-WAN. The role involves leading the design, implementation, and operation of enterprise network security solutions across hybrid cloud and on-premises environments.

Responsibilities:

• Design, implement, and maintain enterprise Palo Alto Networks firewall infrastructure across on-premises and cloud environments
• Deploy and operationalize Palo Alto firewalls within Google Cloud Platform (GCP) and other public cloud platforms
• Design and implement Cisco Viptela SD-WAN architecture with:
• GCP as the SD-WAN hub
• On-premises data centers and branch offices as spokes
• Secure hybrid-cloud connectivity
• High availability and resilient routing
• Configure and manage:
• Security policies
• NAT policies
• VPNs (IPsec)
• Zone-based security
• Application-based security policies
• Optimize firewall rule bases by identifying and removing obsolete, overly permissive, or non-compliant policies
• Perform firewall upgrades, patching, lifecycle management, and platform optimization
• Design secure cloud networking solutions supporting enterprise workloads in GCP
• Configure and troubleshoot routing protocols including BGP and OSPF
• Support SD-WAN routing, transport selection, failover, and hybrid-cloud connectivity
• Troubleshoot complex network and security issues across cloud, SD-WAN, firewalls, VPNs, and enterprise networks
• Participate in security incidents, root cause analysis, and infrastructure recovery activities
• Automate operational tasks using Python, Terraform, Ansible, or similar automation tools
• Collaborate with Cloud, Infrastructure, Security, and Network Engineering teams to deliver secure and scalable solutions
• Develop technical documentation, architecture diagrams, operational procedures, and deployment standards
• Provide technical leadership and recommendations for future network modernization initiatives

Requirements:

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field (or equivalent experience)
• 10+ years of experience in Network Security and Firewall Engineering
• Extensive hands-on experience with Palo Alto Networks Firewalls
• Extensive hands-on experience with Panorama
• Extensive hands-on experience with Security policy management
• Extensive hands-on experience with NAT
• Extensive hands-on experience with VPN
• Extensive hands-on experience with Threat Prevention
• Strong experience deploying Palo Alto firewalls in Google Cloud Platform (GCP)
• Proven experience implementing Cisco Viptela SD-WAN solutions in enterprise environments
• Strong understanding of Hybrid cloud networking
• Strong understanding of Cloud security architectures
• Strong understanding of Network segmentation
• Strong understanding of Zero Trust principles
• Experience designing hub-and-spoke connectivity between cloud and on-premises environments
• Strong knowledge of BGP
• Strong knowledge of OSPF
• Strong knowledge of IPsec VPN
• Strong knowledge of SD-WAN routing
• Strong knowledge of Dynamic routing protocols
• Experience with scripting and automation using Python, Terraform, Ansible, or similar tools
• Strong analytical, troubleshooting, and problem-solving skills
• Ability to independently lead technical projects from design through implementation
• Palo Alto Networks Certified Network Security Engineer (PCNSE)
• Palo Alto Networks Certified Network Security Administrator (PCNSA)
• Cisco SD-WAN or Cisco Viptela certifications
• Experience with GCP cloud-native networking and security services
• Experience working within highly regulated enterprise environments
• Familiarity with Infrastructure as Code (IaC) practices
• Experience with cloud automation and CI/CD pipelines
• Knowledge of enterprise network monitoring and observability platforms