Technical Consultant – Cisco SSE

Job Title: Technical Consultant – Netskope & SSE (L3 Engineer)

Company: Inflow Technologies

Location: Bangalore (Work From Office, 5 days/week)

About Inflow Technologies:

Inflow Technologies, founded in 2005 and headquartered in Bangalore, is a leading value-added IT infrastructure distributor across Networking, Cybersecurity, Unified Communications, AIDC, Surveillance, Server, Storage, and Software. With 20+ locations across India/South Asia and a 120+ member certified technical team, Inflow supports channel partners through the full solution sales cycle. Annual run-rate revenue: USD 700+ Million.

Position Overview:

We're looking for an experienced Technical Consultant (L3 Engineer) specializing in Netskope and Security Service Edge (SSE) technologies. You'll own end-to-end architecture, design, deployment, and optimization of cloud security solutions — acting as a trusted advisor who translates business requirements into secure, scalable technical architectures, and resolves advanced issues through root cause analysis.

Key Responsibilities:

Implementation & Deployment

• Deploy Netskope CASB (API + Proxy), SWG, DLP (Email/Web/Network), ZTNA (Private Access), NPA, and Prime Advantage package
• Configure traffic steering (Client, GRE, IPsec), policy rules (DLP, URL filtering, access control), and dashboard fine-tuning
• Perform agent rollout across Windows, Mac, and Mobile

Architecture & Design

• Design a secure access architecture for remote users, branch offices, and cloud workloads
• Integrate with identity providers (Azure AD, Okta) and existing security stack (Firewall, Proxy, SIEM)
• Integrate Netskope with SIEM (Splunk, QRadar), EDR tools, and email security
• Configure SSO/SAML authentication

Required Qualifications:

• Bachelor's degree in IT/CS or related field
• 6–8 years of experience (L3 level)
• Preferred certifications: Netskope Certified Cloud Security Architect (NCSA), NSK 100/200/300, CCNA/Security+ (good to have)

Interview Process: 2 rounds (Virtual) + Final round (Face-to-Face)

Job Title: L2 Post-Sales Engineer – Cisco SSE (Secure Service Edge)

Department: Cybersecurity / Network Security

Location: Bangalore 

Job Type: Full time

Gross Salary: 10 - 12 LPA

Experience: 3–5 Years

Key Responsibilities:

• Lead partial or full deployment of Cisco SSE components under guidance from senior engineers.
• Configure and optimize Cisco (ZTNA, SASE, SWG, CASB).
• Assist in integrating Cisco SD-WAN (Viptela/Meraki) into SSE frameworks.
• Perform Level 2 troubleshooting, including analysing logs, policy behaviour, and network flow.
• Engage directly with client IT teams to provide remote support, training, and resolution planning.
• Contribute to maintaining solution documentation, run books, and knowledge base.
• Participate in upgrade/migration projects and post-deployment optimization efforts.

Technical Skills Required:

• Good understanding of Cisco SD-WAN (routing, security policies, cloud integration).
• Familiarity with SASE architecture, ZTNA, SWG, CASB, and cloud security posture.
• Ability to perform log analysis, packet capture interpretation, and root cause diagnosis.
• Comfort with CLI and web-based interfaces of security/networking tools.
• Basic scripting/automation (Python, Shell) experience is a plus.

Certifications (Preferred but Not Mandatory):

• Cisco Certified Specialist – Security Core / CCNP Security
• Cisco Umbrella and Duo product training/certification
• Other SASE/SSE vendor exposure (Zscaler, Prisma, Netskope) is a plus

Senior Network Security Engineer – ZTNA (Zscaler, Axis/HPE SSE Focus)

• ZTNA and Zero Trust Implementation: The role involves architecting and deploying ZTNA solutions using platforms like Zscaler and Axis Security, replacing traditional VPNs with identity-aware access, enforcing least-privilege models based on user identity, device posture, and application context, and integrating with identity providers and security tools to secure remote workforces and third parties. Migration from VPN to ZTNA is a key responsibility. 

• Network Security Architecture and Operations: The engineer participates in architecture reviews, designs secure environments across data centers, cloud, and edge, provides risk and telemetry analysis, supports audits and compliance, manages SIEM systems, and collaborates with global cybersecurity and infrastructure teams to maintain security posture. 

• Technical Expertise and Qualifications: Required qualifications include over 10 years of experience in network security engineering, hands-on expertise with Zscaler (ZIA, ZPA), Axis Security/Aruba SSE, deep knowledge of Zero Trust, SASE frameworks, firewall and proxy technologies, identity integration, cloud security across AWS, Azure, and GCP, and certifications such as CCNP, CCIE, Zscaler certifications, and CISSP or CISM. 

• Role Focus and Strategic Importance: The position emphasizes transitioning from traditional network security to identity-driven access security, positioning ZTNA as a core transformation pillar replacing VPNs, aligning with enterprise Zero Trust initiatives, enabling secure hybrid workforces, and balancing expertise in both modern cloud security platforms and traditional network controls.

Technical Consultant – Palo Alto Networks

Company: Inflow Technologies

Website: https://inflowtechnologies.com

About: Founded in 2005, Inflow Technologies is a niche IT Infrastructure Distribution Services player offering Value Added Distribution in Networking, Cybersecurity, UCC, AIDC, Surveillance, Server, Storage & Software across India/South Asia. HQ in Bangalore, 20+ locations, 120+ certified technical resources, USD 700M+ annual run-rate revenue.

Location: Bangalore

Work Mode: Work From Office

Work Days: 5 days/week

Position Overview

Senior-level, high-impact technical role driving architecture, implementation, and optimization of Palo Alto Networks' enterprise security solutions. Acts as SME bridging security engineering and client-facing technical consultation.

Key Responsibilities

• Design, deploy, and optimize Palo Alto NGFW solutions in complex enterprise environments
• Provide L3/L4 escalation support for Palo Alto firewall, Prisma, and Cortex-related issues (PAN-OS)
• Architect and implement: Prisma Access (SASE/ZTNA), Prisma Cloud (CSPM, CWPP, CNAPP), Cortex XDR/XSOAR
• Advanced troubleshooting: traffic flow issues, security policy mismatches, VPN (IPSec/GlobalProtect), threat prevention, URL filtering, SSL decryption
• Lead end-to-end implementation projects (design, deployment, migration, optimization)
• Integrate Palo Alto solutions with SIEM/SOC platforms, IAM (SAML, Azure AD, Okta), and public cloud (AWS, Azure, GCP)
• Manage HA, clustering, and firewall upgrades
• Liaise with Palo Alto TAC for critical issue resolution
• Conduct security assessments, best practice reviews, and performance tuning
• Maintain technical documentation (HLDs/LLDs, SOPs, runbooks)
• Mentor L1/L2 engineers
• Participate in change management, maintenance windows, and incident response

Requirements

• Experience: 6–12 years in network and security engineering (min 6 years)
• Education: Bachelor's degree in Computer Science, Engineering, or related field

Process

• Interview Rounds: 2 Virtual + Final Face-to-Face

Zscaler Network Security Engineer | 4–7+ Years

• Manage and troubleshoot Zscaler ZIA & ZPA, including policies, URL filtering, SSL inspection, DNS security, App Segments and App Connectors.
• Troubleshoot Client Connector, PAC, GRE/IPsec tunnels and Zscaler Digital Experience issues.
• Strong knowledge of TCP/IP, DNS, DHCP, IPAM, VLAN and Ethernet switching; Infoblox experience preferred.
• Must have working experience in one of: Palo Alto Firewall, Cisco LAN/Wi-Fi, or Cisco SD-WAN.
• Handle incidents, changes, SLA/KPI, ITIL processes, documentation and L3 escalations.
• Willingness to work in rotating/follow-the-sun shifts.

Position: Technical Lead – Forcepoint (Data & Cloud Security)

Company: Inflow Technologies

Location: Bangalore

Work Mode: Work From Office | 5 days/week

Experience Required: Minimum 6 years

Interview Process: 2 rounds (Virtual + Final Face-to-Face)

About Inflow Technologies

Founded in 2005, Inflow is a value-added IT infrastructure distributor covering Networking, Cybersecurity, UC&C, AIDC, Surveillance, Server, Storage & Software across India/South Asia. HQ'd in Bangalore with 20+ locations, backed by a 120+ certified technical team, and ~USD 700M+ annual run-rate revenue.

Position Overview

Acting as the Forcepoint subject matter expert, this role owns end-to-end design, deployment, and troubleshooting of enterprise data and cloud security architectures — spanning DLP, SWG, CASB, and SSE/ZTNA. The role sits at the intersection of solution architecture and hands-on L3 execution: defining security policies, configuring network proxies, and resolving complex support escalations in a client-facing, consultative capacity.

Core Products

• Forcepoint DLP (Endpoint, Network, Web, Email)
• Forcepoint Web Security
• Forcepoint Email Security
• Forcepoint CASB
• Forcepoint Suite / Forcepoint One
• Forcepoint Cloud Security / SSE (incl. ZTNA)
• Forcepoint DSPM

Key Responsibilities

1. Solution Design & Architecture

• Design enterprise architectures: DLP (Endpoint + Network + Discovery), Web Security (Proxy/Hybrid/Cloud), CASB & SaaS protection, Forcepoint Suite/One
• Install & configure Management Server, Policy Engine, Detection Servers, Protectors (Email/Web/Network), Endpoint agents (Windows/Mac)
• Implement EDM/IDM/OCR and data classification policies

2. Web Security (SWG)

• Deploy on-prem (V-series appliances) and cloud SWG/hybrid mode
• Configure transparent/explicit proxy, SSL inspection, URL filtering

3. Email Security

• Configure SMTP routing, DLP email policies, encryption & compliance rules

4. Advanced Policy Configuration

• Design/tune DLP policies (structured + unstructured data), web filtering (user/group/app-based), cloud app governance rules

5. L3 Troubleshooting & RCA (Critical)

• Handle: DLP not detecting over HTTPS, endpoint agent communication failures, web proxy latency/SSL failures, policy not applying to users, email DLP bypass
• Approach: log analysis (Policy Engine, endpoint, web), packet capture/traffic analysis, root cause identification & permanent fix

Qualifications & Certifications (Preferred)

• Bachelor's degree (IT/CS or related)
• Forcepoint Certified Administrator (FCA)
• Forcepoint DLP Specialist
• CCNA / Security+ (nice-to-have)

Role Overview

We are looking for an experienced Network Security Engineer to design, implement, maintain, and secure enterprise network infrastructure. The role requires a strong understanding of network security principles, hands-on experience with security technologies, and the ability to troubleshoot complex network and security issues.

The ideal candidate will work closely with network, infrastructure, cloud, application, and security teams to ensure secure, resilient, and highly available network environments. The candidate should be comfortable handling security incidents, performing root-cause analysis, implementing security controls, and contributing to continuous improvement of the organization's network security posture.

Key Responsibilities

• Design, implement, configure, and maintain enterprise network security infrastructure.
• Manage and support network security technologies including firewalls, VPNs, IDS/IPS, secure gateways, and network access controls.
• Configure and maintain security policies, access rules, NAT, VPN tunnels, and related network security controls.
• Monitor network traffic and security events to identify potential threats, anomalies, and unauthorized access.
• Troubleshoot complex network connectivity and security-related issues and perform root-cause analysis.
• Investigate and respond to network security incidents in coordination with security and infrastructure teams.
• Review firewall and network security rules regularly and ensure they follow established security standards and business requirements.
• Support secure connectivity across data centers, corporate networks, remote locations, cloud environments, and third-party networks.
• Participate in network security assessments, vulnerability remediation, and security hardening activities.
• Implement and maintain network segmentation and access-control mechanisms.
• Work with internal teams to assess security requirements for new applications, infrastructure, and network changes.
• Participate in change management, implementation, and post-change validation activities.
• Maintain network security documentation, architecture diagrams, configurations, and operational procedures.
• Contribute to security improvement initiatives, automation, standardization, and operational efficiency.
• Work with vendors and technology partners for issue resolution, upgrades, and technical escalations.
• Ensure network security operations align with organizational policies, industry standards, and compliance requirements.

Required Skills

• Strong experience in network security engineering and enterprise networking.
• Good understanding of TCP/IP, DNS, DHCP, HTTP/HTTPS, routing, switching, VLANs, and network protocols.
• Hands-on experience with enterprise firewalls and security gateways.
• Strong understanding of VPN technologies, IPsec, SSL/TLS, NAT, and access-control policies.
• Experience with IDS/IPS, network monitoring, traffic analysis, and security event investigation.
• Experience troubleshooting network and security issues across complex environments.
• Good understanding of network security architecture, segmentation, and secure connectivity.
• Experience with incident management, change management, and root-cause analysis.
• Familiarity with security best practices, vulnerability management, and network hardening.
• Strong analytical, troubleshooting, and problem-solving skills.
• Good written and verbal communication skills with the ability to work effectively with technical and non-technical stakeholders.

Preferred Skills

• Experience with security technologies from vendors such as Palo Alto, Fortinet, Cisco, Check Point, or similar.
• Exposure to cloud networking and cloud security across AWS, Azure, or GCP.
• Knowledge of Zero Trust, SASE, SD-WAN, or network access control concepts.
• Experience with security monitoring/SIEM platforms.
• Exposure to scripting or automation using Python, PowerShell, or similar technologies.
• Relevant certifications such as CCNA/CCNP Security, PCNSE, Fortinet certifications, or equivalent are an advantage.

Key Competencies

• Network Security Engineering
• Enterprise Network Troubleshooting
• Firewall & VPN Management
• Security Incident Handling
• Network Monitoring & Analysis
• Security Hardening
• Root-Cause Analysis
• Risk & Vulnerability Awareness
• Change & Configuration Management
• Stakeholder Communication
• Problem Solving
• Documentation & Process Discipline

Key Responsibilities:

1. Network Engineering & Team Leadership

• Architect & Maintain: Design, implement, and manage secure, scalable network architectures (LAN, WAN, VPN, and Google Workspace) supporting both corporate offices and widespread on-site clinic networks.
• Lead the Team: Mentor and manage a team of system/network engineers, setting clear milestones, managing internal ticketing escalations, and conducting performance reviews.
• Uptime & Redundancy: Ensure 99.9% uptime for critical health-tech delivery systems by monitoring network traffic, troubleshooting bottlenecks, and implementing failover mechanisms.

2. Data Privacy, Cyber Security & Compliance Safeguards:

• Privacy & Zero-Trust Infrastructure: Implement strict access control mechanisms, data encryption standards (at rest and in transit), and zero-trust network frameworks to protect sensitive personal health information (SPI/PHI).
• End-to-End Security Architecture: Oversee the deployment and maintenance of enterprise-grade Antivirus/EDR solutions, End-to-End Firewalls, and comprehensive Cybersecurity frameworks to defend against external and internal threats.
• Access Control & Governance: Define, implement, and enforce robust Access Control policies—including Least Privilege and Role-Based Access Control (RBAC)—across all corporate, clinical, and Google Workspace environments.
• Access Reviews & Audits: Establish and oversee routine, formalized Access Review processes, ensuring user permissions, administrative privileges, and third-party access are regularly audited and validated.
• Regulatory Alignment & Audit Readiness: Align IT, network policies, and access governance protocols with Indian data protection laws (DPDP Act) and global healthcare standards (HIPAA principles). Conduct routine vulnerability assessments and maintain clean compliance logs.

3. Data Data Understanding & Visualization:

• Infrastructure Analytics: Look beyond raw logs. Analyze data flow patterns, bandwidth utilization, and system performance logs to deeply understand network health.
• Executive Dashboards: Transform complex IT operational data, compliance metrics, and access audit logs into intuitive, actionable visual dashboards using tools like Tableau, Power BI, or AWS QuickSight.
• Data-Driven Decisions: Present clear data trends to the executive leadership team regarding resource utilization, forecasting future capacity needs, and justifying infrastructure spend.

ServiceNow USEM Technical Consultant -(Offshore) Contract Role

· Location- Remote

· Contract- 6 months

Job Description

Position Description:  

The ServiceNow USEM (SecOps) Technical Consultant (Security Operations) is responsible to lead the design, development, and implementation of security operations (SecOps) solutions on the ServiceNow platform. This role is responsible for integrating security workflows, enhancing automation, and optimizing security response processes to ensure robust cybersecurity operations. 

Primary Responsibilities: 

Design, configure, and implement ServiceNow GRC/IRM modules, focusing on Policy, Compliance, and Risk Management frameworks. Develop custom solutions utilizing Flow Designer, Business Rules, Client Scripts, UI Actions, UI Policies, and Script Includes.

Configure Service Portal/Employee Center components, Service Catalog record producers, notifications, inbound email actions, and email-actionable approvals.

Manage Access Control Lists (ACLs) and role-based access designs alongside SLA definitions and task-based SLA behaviors.

Handle update set management and oversee code promotion across development, test, and production instances.

Requirements

Qualifications: 

· 5+ years hands-on ServiceNow development experience, with demonstrable delivery on client-facing implementation projects

· 2+ years working directly in ServiceNow GRC/IRM, specifically Policy and Compliance Management and/or Risk Management. Candidates whose GRC exposure is limited to a single mod

· Demonstrated experience with Flow Designer, business rules, client scripts, UI Actions, UI Policies, and script includes

· Experience configuring notifications and inbound email actions, including email-actionable approvals

· Experience with ACL configuration and understanding of role-based access design

· Experience with SLA definitions and task-based SLA behavior

· Experience with Service Catalog record producers and Employee Center / Service Portal configuration

· Proficiency with update set management and promotion across development, test, and production instances

· ServiceNow Certified System Administrator (CSA) required CIS Advanced Risk preferred 

· Work Experience: 5+ years

· Industry: Technology

• Prepare Solution Design and Bill of Materials (BoM) for proposed networking solutions.
• Conduct Partner and End-Customer Meetings/Trainings to support technical enablement.
• Deliver Product PoCs (Proof of Concept) and Product Demonstrations to partners and customers.
• Conduct Site Surveys and client analysis to understand customer infrastructure and requirements.
• Qualify sales leads into actionable opportunities in coordination with the sales team.
• Assist the sales team with product overviews and technical positioning during the sales cycle.
• Work closely with vendor (Juniper Networks) and customer teams to align on technical requirements and solution fitment.
• Respond to or create RFPs/RFIs as part of the technical pre-sales process.

Experience: Minimum 4 Years

• Strong presentation and training skills.
• Sound understanding of Wireless, Switching, Routing, and SDN technologies and terminologies.
• Certification in Juniper products and solutions preferred; essential hands-on experience.
• Excellent verbal and written communication skills with a consultative approach.
• Ability to explain technical concepts clearly with strong presentation skills.
• Problem-solving ability with a focus on addressing customer pain points.
• Customer-oriented mindset with adaptability and continuous learning.
• Effective time management, multitasking, and team collaboration abilities.
• Strong understanding of enterprise networking infrastructure covering Wireless/Switching/Routing/SDN; knowledge of Juniper Networks products is an added advantage.