Senior Network Security Engineer - ZTNA

Zscaler Network Security Engineer | 4–7+ Years

• Manage and troubleshoot Zscaler ZIA & ZPA, including policies, URL filtering, SSL inspection, DNS security, App Segments and App Connectors.
• Troubleshoot Client Connector, PAC, GRE/IPsec tunnels and Zscaler Digital Experience issues.
• Strong knowledge of TCP/IP, DNS, DHCP, IPAM, VLAN and Ethernet switching; Infoblox experience preferred.
• Must have working experience in one of: Palo Alto Firewall, Cisco LAN/Wi-Fi, or Cisco SD-WAN.
• Handle incidents, changes, SLA/KPI, ITIL processes, documentation and L3 escalations.
• Willingness to work in rotating/follow-the-sun shifts.

Technical Consultant – Cisco SSE

Company: Inflow Technologies

Website: https://inflowtechnologies.com/

Company Details:

Founded in 2005, Inflow Technologies is a niche player in the IT Infrastructure Distribution Services industry, providing Value Added Distribution in Networking, Cyber Security, Unified Communications and Collaboration, AIDC, Surveillance, Server, Storage & Software related Products & Services in India/South Asia. Inflow is headquartered in Bangalore with a presence across 20+ locations, enabling resellers to design, deploy, and adopt IT Infrastructure solutions to facilitate their customers' needs. This initiative, supported by a strong technical team of 120+ certified resources, assists channel partners throughout their sales cycle. Inflow has an annual run-rate revenue of USD 700+ million.

Location: Bangalore

Mode of Working: Work From Office

Days of Working: 5 Days a week

Responsibilities:

Position Overview:

We are seeking a highly skilled and customer-centric Technical Consultant – Cisco SSE (Security Service Edge) to join our team in Bangalore. In this role, you will act as a trusted advisor and hands-on expert, leading the end-to-end design, deployment, and optimization of Cisco's cutting-edge SSE solutions for enterprise clients.

Key Responsibilities:

• Design and implement Cisco SSE solutions for secure user access to cloud and on-prem resources.
• Perform ongoing policy and access control reviews, aligning with Zero Trust principles.
• Troubleshoot SSE-related issues, including secure connectivity, access policies, and traffic routing.
• Lead end-to-end implementation of Cisco SSE solutions for enterprise clients.
• Configure and deploy Cisco (ZTNA, SWG, CASB) in customer environments.
• Work closely with network teams to integrate Cisco SD-WAN and optimize SSE delivery.
• Troubleshoot technical issues during and after implementation, ensuring minimal downtime.
• Conduct knowledge transfer and handover sessions for client IT teams.
• Collaborate with Cisco TAC, account managers, and the partner ecosystem for escalations.
• Document configurations, solution architectures, and SOPs.
• Provide post-deployment tuning, updates, and optimization services.
• Collaborate with IT, Security, and Compliance teams to ensure architecture meets business and regulatory requirements.
• Monitor and optimize network security performance across branch offices, mobile users, and remote workforces.
• Provide technical documentation and training to internal teams.

Skills Needed:

Core Requirements — Education & Experience: Min 6 Years

• Bachelor's degree in Computer Science, Information Technology, or a related field
• 6 to 12 years of experience in network and security engineering

Interview Process: 2 Rounds Virtual and Final Face-to-Face

Job Title: Technical Consultant – Netskope & SSE (L3 Engineer)

Company: Inflow Technologies

Location: Bangalore (Work From Office, 5 days/week)

About Inflow Technologies:

Inflow Technologies, founded in 2005 and headquartered in Bangalore, is a leading value-added IT infrastructure distributor across Networking, Cybersecurity, Unified Communications, AIDC, Surveillance, Server, Storage, and Software. With 20+ locations across India/South Asia and a 120+ member certified technical team, Inflow supports channel partners through the full solution sales cycle. Annual run-rate revenue: USD 700+ Million.

Position Overview:

We're looking for an experienced Technical Consultant (L3 Engineer) specializing in Netskope and Security Service Edge (SSE) technologies. You'll own end-to-end architecture, design, deployment, and optimization of cloud security solutions — acting as a trusted advisor who translates business requirements into secure, scalable technical architectures, and resolves advanced issues through root cause analysis.

Key Responsibilities:

Implementation & Deployment

• Deploy Netskope CASB (API + Proxy), SWG, DLP (Email/Web/Network), ZTNA (Private Access), NPA, and Prime Advantage package
• Configure traffic steering (Client, GRE, IPsec), policy rules (DLP, URL filtering, access control), and dashboard fine-tuning
• Perform agent rollout across Windows, Mac, and Mobile

Architecture & Design

• Design a secure access architecture for remote users, branch offices, and cloud workloads
• Integrate with identity providers (Azure AD, Okta) and existing security stack (Firewall, Proxy, SIEM)
• Integrate Netskope with SIEM (Splunk, QRadar), EDR tools, and email security
• Configure SSO/SAML authentication

Required Qualifications:

• Bachelor's degree in IT/CS or related field
• 6–8 years of experience (L3 level)
• Preferred certifications: Netskope Certified Cloud Security Architect (NCSA), NSK 100/200/300, CCNA/Security+ (good to have)

Interview Process: 2 rounds (Virtual) + Final round (Face-to-Face)

WowPe is a leading fintech company revolutionizing the way businesses handle financial transactions. Our suite of innovative products includes a secure Payment Gateway for seamless online transactions, robust Payouts solutions to streamline bulk payments, and a versatile Point of Sale (POS) system for efficient in-store transactions. At WowPe, we’re dedicated to providing user-friendly, scalable, and reliable solutions that empower businesses to grow and succeed in today’s fast-paced digital economy.

We are looking for a highly skilled Cloud Infrastructure & Cloud Network Engineer to design, build, and manage secure, scalable hybrid cloud environments at WowPe. This role will focus on cloud networking, hybrid connectivity, infrastructure automation, security, reliability, and performance across on-prem and cloud platforms (AWS/Azure). You will play a critical role in ensuring high availability, security, and performance of our fintech platforms.

A Day in the Life

• Design and review cloud network architectures (VPC/VNet, routing, segmentation)
• Troubleshoot latency, connectivity, VPN, and performance issues
• Work with DevOps and application teams to support deployments and scalability
• Automate infrastructure provisioning and security guardrails
• Monitor network health, traffic flow, and system performance
• Ensure security, compliance, and disaster recovery readiness
• Support hybrid connectivity between on-prem data centers and cloud environments.

Key Responsibilities

Cloud Networking & Hybrid Architecture

• Design and implement VPC/VNet architectures, subnetting, routing tables, NAT, gateways, and secure segmentation
• Build and manage hybrid connectivity between on-prem data centers and cloud using Site-to-Site VPN, ExpressRoute, Direct Connect
• Configure and manage Layer 4 & Layer 7 load balancers for high availability and traffic distribution
• Architect DNS, CDN, and edge networking strategies for low-latency global access

Security & Zero-Trust

• Implement Zero-Trust networking using security groups, NACLs, identity-aware proxies, mTLS
• Design secure access controls and network isolation
• Work closely with security teams to ensure PCI, ISO, SOC compliance readiness

Automation, Platform & Reliability

• Automate infrastructure provisioning using Infrastructure as Code (Terraform/ARM/CloudFormation)
• Build self-healing, auto-scaling architectures with health checks and fault tolerance
• Support and manage Kubernetes clusters (EKS/AKS) including networking and service communication
• Integrate infra with CI/CD pipelines for safe and frequent deployments

Operations & Observability

• Perform advanced troubleshooting for latency, packet loss, MTU, routing loops
• Implement and manage monitoring, logging, and observability (Prometheus, Grafana, ELK, Azure Monitor, CloudWatch)
• Design and maintain disaster recovery architectures, multi-region networking, and replication strategies
• Ensure high availability, performance optimization, and cost efficiency

Basic Qualifications & Skills

• 4+ years of experience in Cloud Infrastructure & Cloud Networking
• Strong hands-on experience with AWS and/or Azure
• Deep understanding of VPC/VNet, routing, NAT, gateways, load balancers, DNS
• Experience with Hybrid connectivity (VPN, ExpressRoute, Direct Connect)
• Solid knowledge of network security, firewalls, access control, segmentation
• Hands-on experience with Infrastructure as Code (Terraform preferred)
• Experience in monitoring, troubleshooting, and incident handling
• Strong understanding of high availability, DR, and performance optimization

Preferred Qualifications

• Experience in fintech, BFSI, or high-compliance environments
• Exposure to Zero-Trust architecture and security best practices
• Experience with Kubernetes (EKS/AKS), service mesh, microservices networking
• Familiarity with CI/CD pipelines and DevOps practices
• Knowledge of CDN, edge networking, and global traffic management
• Experience with compliance frameworks (PCI-DSS, ISO 27001, SOC2)
• Ability to design large-scale, resilient, production-grade architectures

Role Overview

We are looking for an experienced Network Security Engineer to design, implement, maintain, and secure enterprise network infrastructure. The role requires a strong understanding of network security principles, hands-on experience with security technologies, and the ability to troubleshoot complex network and security issues.

The ideal candidate will work closely with network, infrastructure, cloud, application, and security teams to ensure secure, resilient, and highly available network environments. The candidate should be comfortable handling security incidents, performing root-cause analysis, implementing security controls, and contributing to continuous improvement of the organization's network security posture.

Key Responsibilities

• Design, implement, configure, and maintain enterprise network security infrastructure.
• Manage and support network security technologies including firewalls, VPNs, IDS/IPS, secure gateways, and network access controls.
• Configure and maintain security policies, access rules, NAT, VPN tunnels, and related network security controls.
• Monitor network traffic and security events to identify potential threats, anomalies, and unauthorized access.
• Troubleshoot complex network connectivity and security-related issues and perform root-cause analysis.
• Investigate and respond to network security incidents in coordination with security and infrastructure teams.
• Review firewall and network security rules regularly and ensure they follow established security standards and business requirements.
• Support secure connectivity across data centers, corporate networks, remote locations, cloud environments, and third-party networks.
• Participate in network security assessments, vulnerability remediation, and security hardening activities.
• Implement and maintain network segmentation and access-control mechanisms.
• Work with internal teams to assess security requirements for new applications, infrastructure, and network changes.
• Participate in change management, implementation, and post-change validation activities.
• Maintain network security documentation, architecture diagrams, configurations, and operational procedures.
• Contribute to security improvement initiatives, automation, standardization, and operational efficiency.
• Work with vendors and technology partners for issue resolution, upgrades, and technical escalations.
• Ensure network security operations align with organizational policies, industry standards, and compliance requirements.

Required Skills

• Strong experience in network security engineering and enterprise networking.
• Good understanding of TCP/IP, DNS, DHCP, HTTP/HTTPS, routing, switching, VLANs, and network protocols.
• Hands-on experience with enterprise firewalls and security gateways.
• Strong understanding of VPN technologies, IPsec, SSL/TLS, NAT, and access-control policies.
• Experience with IDS/IPS, network monitoring, traffic analysis, and security event investigation.
• Experience troubleshooting network and security issues across complex environments.
• Good understanding of network security architecture, segmentation, and secure connectivity.
• Experience with incident management, change management, and root-cause analysis.
• Familiarity with security best practices, vulnerability management, and network hardening.
• Strong analytical, troubleshooting, and problem-solving skills.
• Good written and verbal communication skills with the ability to work effectively with technical and non-technical stakeholders.

Preferred Skills

• Experience with security technologies from vendors such as Palo Alto, Fortinet, Cisco, Check Point, or similar.
• Exposure to cloud networking and cloud security across AWS, Azure, or GCP.
• Knowledge of Zero Trust, SASE, SD-WAN, or network access control concepts.
• Experience with security monitoring/SIEM platforms.
• Exposure to scripting or automation using Python, PowerShell, or similar technologies.
• Relevant certifications such as CCNA/CCNP Security, PCNSE, Fortinet certifications, or equivalent are an advantage.

Key Competencies

• Network Security Engineering
• Enterprise Network Troubleshooting
• Firewall & VPN Management
• Security Incident Handling
• Network Monitoring & Analysis
• Security Hardening
• Root-Cause Analysis
• Risk & Vulnerability Awareness
• Change & Configuration Management
• Stakeholder Communication
• Problem Solving
• Documentation & Process Discipline

Job Summary

We are looking for an experienced Network Engineer with strong hands-on expertise in enterprise networking, cloud networking, network security, routing, switching, and troubleshooting. The candidate will be responsible for designing, implementing, maintaining, and optimizing secure and highly available network infrastructure across on-premises and cloud environments.

Key Responsibilities

• Design, configure, and manage enterprise network infrastructure, including routers, switches, firewalls and load balancers.
• Configure and troubleshoot routing protocols such as BGP, OSPF and static routing.
• Manage LAN, WAN, VLANs, VPNs, subnets, NAT, DNS and DHCP.
• Implement and support cloud networking across AWS and Azure, including VPC, VNet, route tables, Network Security Groups (NSGs), security groups and private endpoints.
• Configure site-to-site VPNs, remote-access VPNs, AWS Direct Connect and Azure ExpressRoute.
• Troubleshoot network connectivity, latency, packet loss, MTU issues and routing problems.
• Monitor network performance, availability and capacity using network monitoring tools.
• Implement network security policies, firewall rules, access controls and segmentation.
• Support hybrid cloud connectivity and on-premises-to-cloud network migration.
• Collaborate with infrastructure, cloud, security and application teams to resolve network incidents.
• Perform root cause analysis (RCA), document network configurations and maintain operational runbooks.
• Support change management, disaster recovery and high-availability requirements

Job Title: L2 Post-Sales Engineer – Cisco SSE (Secure Service Edge)

Department: Cybersecurity / Network Security

Location: Bangalore 

Job Type: Full time

Gross Salary: 10 - 12 LPA

Experience: 3–5 Years

Key Responsibilities:

• Lead partial or full deployment of Cisco SSE components under guidance from senior engineers.
• Configure and optimize Cisco (ZTNA, SASE, SWG, CASB).
• Assist in integrating Cisco SD-WAN (Viptela/Meraki) into SSE frameworks.
• Perform Level 2 troubleshooting, including analysing logs, policy behaviour, and network flow.
• Engage directly with client IT teams to provide remote support, training, and resolution planning.
• Contribute to maintaining solution documentation, run books, and knowledge base.
• Participate in upgrade/migration projects and post-deployment optimization efforts.

Technical Skills Required:

• Good understanding of Cisco SD-WAN (routing, security policies, cloud integration).
• Familiarity with SASE architecture, ZTNA, SWG, CASB, and cloud security posture.
• Ability to perform log analysis, packet capture interpretation, and root cause diagnosis.
• Comfort with CLI and web-based interfaces of security/networking tools.
• Basic scripting/automation (Python, Shell) experience is a plus.

Certifications (Preferred but Not Mandatory):

• Cisco Certified Specialist – Security Core / CCNP Security
• Cisco Umbrella and Duo product training/certification
• Other SASE/SSE vendor exposure (Zscaler, Prisma, Netskope) is a plus

About Us

CLOUDSUFI is a Silicon Valley-based specialist Data Engineering & Cloud Technologies player with top-tier clients, favorable revenue mix, strong financial performance, and robust management. We pride ourselves in helping in the Data Discovery, Insights and Monetization for organizations. We offer quality of work, opportunities to learn new platforms/technologies that will help young engineers put themselves ahead in their careers compared to their peers in the IT Services industry. CLOUDSUFI is a Data Science and Product Engineering company building Products/Solutions for Technology and Enterprise industries leveraging the advent of Cloud Hyper Scalers and AI/ML, NLP technologies.

The organization is built to scale with strong external/ internal tech capabilities and governance standards. Started in 2019, CLOUDUSUFI is a family of 250 members working towards a common goal of making the enterprise data dance.

To know more, please visit https://cloudsufi.com

Our Values

We are a passionate and empathetic team that prioritizes human values. Our purpose is to elevate the quality of lives for our family, customers, partners and the community.

Equal Opportunity Statement

CLOUDSUFI is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified candidates receive consideration for employment without regard to race, colour, religion, gender, gender identity or expression, sexual orientation and national origin status. We provide equal opportunities in employment, advancement, and all other areas of our workplace. Please explore more at https://www.cloudsufi.com/

Role : Full-Time Individual Contributor (IC)

Reporting to : Solution Architect / Program Manager

Location : India Remote (Quarterly visits to Noida office)

Shift : 2PM-11PM IST

12x5 (On call duty)

Experience : 8-14 Years

ABOUT YOU

• 5+ years’ experience with AWS orchestration via Terraform script
• 5+ years’ experience with CloudWatch/CloudTrail/Guard Duty
• 5+ years’ experience with AWS WAF
• 4+ years’ experience with CloudFlare
• 3+ years’ experience with DataDog
• Experience with PagerDuty
• Ability to make nuanced threat assessments
• Experience in SOPHOS.
• Significant experience with PCI, SOC2, SOX, HIPAA, or other compliance regimes
• Experience in Infrastructure As Code – Ansible / Terraform/ CloudFormation
• Hands-on experience implementing various security tools in CI/CD pipeline
• Strong experience with any cloud service provider (AWS Preferred)
• Implement and oversee technological upgrades, improvements and major changes to the cloud security environment.
• Develop solutions, install/configure/integrate IT tools and security processes within an application or organization to help improve the overall IT security posture.
• Set up Static and Dynamic Code Analysis tools, review the results and explain any gaps and potential impact to the teams (development and operations).
• Penetration testing and container security.
• Evaluate and analyze threat, vulnerability, impact and risk to security issues discovered from security assessments.
• Assess current technology architecture for vulnerabilities, weaknesses and for possible upgrades or improvement
• Creating and managing security strategies
• Oversee information security audits, whether performed by organization or third-party personnel
• Develop, maintain and publish up-to-date information security policies, standards and guidelines.
• Preferred Certification - AWS Security/CISSP/CISM (Certified Information Security Manager)

ABOUT THE ROLE

• Work independently with vendors and collaborate with colleagues
• Experience negotiating remediation timelines and/or remediate found issues independently
• Ability to implement vendor platforms within CI/CD pipelines
• Experience managing/responding to incidents, collecting evidence, and making decisions.
• Working with vendors and HM Teams to deploy criteria within WAF and fine tuning it according to applications’ needs
• Multitasking and continuous ability to provide a high level of concentration for assigned projects.
• Good working knowledge of AWS security in general and familiarity of the AWS native security tools
• The candidate should be experienced and articulate, who is not going to get discouraged, despite meeting roadblocks, and will continue promoting security within the company.
• Ability to create DevSecOps security requirements while working on a project
• Ability to articulate security requirements during the Architecture meetings and working hand in hand with HM Applications and DevOps Principal Engineers

Technical Consultant – Palo Alto Networks

Company: Inflow Technologies

Website: https://inflowtechnologies.com

About: Founded in 2005, Inflow Technologies is a niche IT Infrastructure Distribution Services player offering Value Added Distribution in Networking, Cybersecurity, UCC, AIDC, Surveillance, Server, Storage & Software across India/South Asia. HQ in Bangalore, 20+ locations, 120+ certified technical resources, USD 700M+ annual run-rate revenue.

Location: Bangalore

Work Mode: Work From Office

Work Days: 5 days/week

Position Overview

Senior-level, high-impact technical role driving architecture, implementation, and optimization of Palo Alto Networks' enterprise security solutions. Acts as SME bridging security engineering and client-facing technical consultation.

Key Responsibilities

• Design, deploy, and optimize Palo Alto NGFW solutions in complex enterprise environments
• Provide L3/L4 escalation support for Palo Alto firewall, Prisma, and Cortex-related issues (PAN-OS)
• Architect and implement: Prisma Access (SASE/ZTNA), Prisma Cloud (CSPM, CWPP, CNAPP), Cortex XDR/XSOAR
• Advanced troubleshooting: traffic flow issues, security policy mismatches, VPN (IPSec/GlobalProtect), threat prevention, URL filtering, SSL decryption
• Lead end-to-end implementation projects (design, deployment, migration, optimization)
• Integrate Palo Alto solutions with SIEM/SOC platforms, IAM (SAML, Azure AD, Okta), and public cloud (AWS, Azure, GCP)
• Manage HA, clustering, and firewall upgrades
• Liaise with Palo Alto TAC for critical issue resolution
• Conduct security assessments, best practice reviews, and performance tuning
• Maintain technical documentation (HLDs/LLDs, SOPs, runbooks)
• Mentor L1/L2 engineers
• Participate in change management, maintenance windows, and incident response

Requirements

• Experience: 6–12 years in network and security engineering (min 6 years)
• Education: Bachelor's degree in Computer Science, Engineering, or related field

Process

• Interview Rounds: 2 Virtual + Final Face-to-Face

Job Summary

We are looking for an experienced Network Engineer with strong expertise in network security, firewall administration, Check Point, Juniper SRX, routing protocols, and Python scripting. The candidate will be responsible for managing, configuring, troubleshooting, and optimizing enterprise network infrastructure while ensuring secure and reliable connectivity.

Key Responsibilities

• Configure, manage, and troubleshoot enterprise network devices, firewalls, and security appliances.
• Administer and maintain Check Point firewalls, including security policies, NAT rules, VPNs, and access control.
• Manage Juniper SRX firewalls, including security zones, policies, NAT, IPsec VPNs, and threat prevention.
• Implement and troubleshoot routing protocols such as BGP, OSPF, EIGRP, and static routing.
• Perform network troubleshooting related to connectivity, packet loss, latency, routing, and firewall traffic.
• Configure and maintain site-to-site VPNs and remote-access VPN solutions.
• Monitor network performance, analyze traffic logs, and investigate security incidents.
• Perform firewall rule reviews, configuration backups, software upgrades, and security patching.
• Develop Python scripts to automate network configuration, monitoring, reporting, and routine operational tasks.
• Work with network monitoring tools, packet analyzers, and logging platforms to identify and resolve network issues.
• Participate in incident management, root cause analysis (RCA), change management, and network maintenance activities.
• Maintain network documentation, configuration standards, and operational runbooks.