Network Security Engineer - Telco Virtual Firewalls

Romania·Bucharestmid

Network Security EngineerCybersecurity

0 views0 saves0 applied

Apply Now

Quick Summary

Key Responsibilities

Security policies (App-ID, URL filtering, NAT, segmentation) Threat prevention (IPS, Anti-malware, WildFire) Perform log analysis, traffic inspection,

Requirements Summary

Palo Alto Virtual Firewalls (VM-Series / CN-Series) Panorama for centralized firewall management Strong knowledge of: NGFW features (App-ID, User-ID, Content-ID,

Technical Tools

Network Security EngineerCybersecurity

Practice / Domain
Cyber Security – Telco Cloud & Network Security
Experience Range
5 – 12 Years
Support Model
24x7 Operations (Telco-grade SLA-driven environment)

Role Summary
The Network Security Engineer is responsible for design, deployment, and operations of Telco-grade Virtual Firewalls (vFW) using Palo Alto technologies within Telco cloud (NFV/SDN) environments.
This role ensures secure traffic segmentation, high availability, and scalable firewall deployments supporting carrier-grade networks, VNF architectures, and multi-tenant Telco environments.

Key Responsibilities
1. Telco Virtual Firewall (Palo Alto) Operations

Deploy, configure, and manage Palo Alto Virtual Firewalls (VM-Series / CN-Series) in Telco cloud
Configure:
- Security policies (App-ID, URL filtering, NAT, segmentation)
- Threat prevention (IPS, Anti-malware, WildFire)
Perform log analysis, traffic inspection, and threat detection
Ensure policy enforcement across Telco network segments and trust zones

2. Telco Cloud / NFV Security Implementation

Deploy firewalls as Virtual Network Functions (VNFs) in Telco cloud environments
Integrate with:
- NFV orchestrators / SDN controllers
- Telco cloud platforms (OpenStack / Kubernetes)
Ensure:
- Secure communication between VNFs
- Controlled access using IP/Port/Application-level filtering

3. Traffic Engineering & Connectivity Security

Configure and manage:
- Routing protocols (BGP, static routing)
- VPNs (IPSec, site-to-site connectivity)
Perform deep packet inspection (DPI) and traffic flow analysis
Secure north-south and east-west traffic flows in Telco networks

4. High Availability & Carrier-Grade Design

Implement HA (active-active / active-passive) setups for virtual firewalls
Support:
- Geo-redundant deployments
- Fault-tolerant designs aligned to Telco standards
Ensure no service impact from VNF/node/site failures

5. Monitoring, Incident & Change Management

Monitor firewall health, logs, and alerts
Perform L2/L3 troubleshooting for high-severity incidents
Execute change, incident, and problem management (ITIL aligned)
Collaborate with NOC, SOC, and Telco operations teams

6. Governance, Compliance & Security Assurance

Ensure firewall configurations meet:
- Telco security standards (ETSI / NFV guidelines)
- Enterprise compliance requirements
Support audits with logs, reports, and evidence
Perform policy optimization, cleanup, and compliance validation

Mandatory Skills
Core Technical Skills

Hands-on experience with:
- Palo Alto Virtual Firewalls (VM-Series / CN-Series)
- Panorama for centralized firewall management
Strong knowledge of:
- NGFW features (App-ID, User-ID, Content-ID, IPS)
- Firewall policy design and segmentation

Telco / Cloud Exposure

Experience in:
- Telco cloud / NFV environments
- Virtual firewall deployments at scale
Understanding of:
- VNF lifecycle and orchestration
- SDN-based network security

Networking Fundamentals

Strong understanding of:
- TCP/IP, BGP, routing, NAT
- Network segmentation and Zero Trust
Experience with:
- VPNs (IPSec, SSL VPN)
- Traffic analysis and debugging

Desired / Good-to-Have Skills

Experience with:
- Multi-vendor Telco firewalls
- Kubernetes / container security (CN-Series)
Automation:
- Python / Ansible / REST APIs
Exposure to:
- 5G / LTE network security
- Cloud-native security controls

Certifications (Preferred)

Palo Alto:
- PCNSE / PCNSA
Network / Telco:
- CCNP / CCIE (Security or Service Provider)
Cloud / Telco:
- NFV / Telco cloud certifications (optional)

Soft Skills

Strong troubleshooting and analytical skills
Ability to operate in high pressure, carrier-grade environments
Effective collaboration across global teams (NOC, SOC, Engineering)
Strong communication for client and stakeholder engagement

Key Outcomes / Success Metrics

High availability of Telco firewall services (carrier-grade SLAs)
Secure segmentation and traffic isolation across VNFs
Reduction in security incidents and faster RCA
Improved policy compliance and audit readiness

About Infosys
Infosys is a global leader in next-generation digital services and consulting. We enable clients in 59 countries to navigate their digital transformation.
With over four decades of experience in managing the systems and workings of global enterprises, we expertly steer clients, in 59 countries, as they navigate their digital transformation powered by cloud and AI. We enable them with an AI-first core, empower the business with agile digital at scale and drive continuous improvement with always-on learning through the transfer of digital skills, expertise, and ideas from our innovation ecosystem. We are deeply committed to being a well-governed, environmentally sustainable organization where diverse talent thrives in an inclusive workplace.