Job Title: Network Security Architect

Work Location: BGC Taguig or Makati

Shift: Night Shift/ Shifting - This role requires flexibility

Work Set-up: RTWO/ Hybrid 

Desired Experience: 10+ years

Salary range: 130K to 200K

Required Skills:

• 8+ years of experience in network security with at least 3 years in a security architect role

• Hands-on experience with Checkpoint Firewalls, Palo Alto Firewalls, Cisco ISE, Cloudflare WAF, Illumio Core, Proofpoint email security, Tuffin Secure Change+, Zscaler ZIA/ZPA/ZDX.

• Deep understanding of security concepts, VPNs, IPS/IDS, SSL decryption, and network protocols (TCP/IP, BGP, OSPF).

• Proven expertise in designing, implementing, and managing Cyber Security Operations, incident response, and vulnerability management. 

Technical Expertise:

• Expertise in Palo Alto firewall technologies (PA Series, Panorama, Global Protect) and checkpoint firewalls.

• Strong knowledge of security policies, rule sets, NAT, app-ID, user-ID, content-ID, and URL filtering.

• In-depth knowledge of security policy creation, firewall rule sets, network segmentation, and access controls.

• Proficiency in cloud security best practices and multi-vendor security solutions for hybrid and cloud environments.

• Familiarity with security automation and scripting for streamlining security processes.

Secondary Skills:

• Excellent communication and collaboration skills.

• Strong analytical thinking and problem-solving abilities.

• Ability to work under pressure and in a fast-paced environment.

• Strong organizational skills with attention to detail.

• Experience with compliance frameworks such as PCI-DSS, ISO 27001, HIPAA, GDPR and NIST

• Willingness to respond to on-call incidents and security alerts when necessary.

MUST HAVE:

• Must have hand on experience on above mentioned tools

• B.E/B.Tech/MCA with 6-10 years of experience.

• Palo Alto Networks Certified Network Security Engineer (PCNSE) is highly preferred.

• Relevant certifications such as CISSP, CISM, CCIE security, PCNSE or equivalent.

• Vendor specific certifications from checkpoint, Zscaler, cisco, and Cloudflare are highly desirable

Good to Have:

• Should be amenable to working in Taguig or Makati 

• Must not be a job hopper who only works for less than a year per company

• Not a current or former employee of TCS

Summary of key responsibilities:

1. Configure, manage, and troubleshoot Palo Alto firewalls and security solutions across multiple environments (data centers, cloud, etc.).

Develop, implement, and optimize security policies and procedures, ensuring they are properly applied and enforced.

2. Lead the investigation of complex firewall issues and performance problems, applying deep technical knowledge to resolve incidents.

Deep understanding of security concepts, VPNs, IPS/IDS, SSL decryption, and network protocols (TCP/IP, BGP, OSPF).

3. Collaborate with the network and security teams to ensure the firewall configurations align with network design and overall security strategy

Perform firmware upgrades, security patching, and capacity planning for Palo Alto firewalls.

Work closely with cross-functional teams, including network engineers, cloud architects, and SOC teams, to ensure smooth integration of firewall solutions

4. Self-motivated and quick learner and should be flexible in working 24*7 environment

Must be available for on-call rotations and able to handle critical incidents during non-business hours. Must have ITIL Understanding.