Job Title: SME - Network Security Engineer (Palo Alto)
Location: Hyderabad
Overview:
SHI has an exciting opportunity within our internal IT department for a Subject Matter Expert (SME) – Network Security Engineer to join our Network Infrastructure team. This team is responsible for the design, implementation, and maintenance of SHI’s global network and security architecture.
We are seeking a highly skilled and motivated engineer to drive innovation, enhance operational maturity, and scale our infrastructure in support of SHI’s continued growth. The ideal candidate will play a lead role in designing secure, scalable, and resilient network solutions with a strong focus on Palo Alto Networks technologies.
Responsibilities:
Include but are not limited to:
- Design, implement, and support advanced network and security solutions using hardware, software, and cloud-based technologies.
- Lead the architecture and rollout of network infrastructure across global sites including datacenter design, migrations, and disaster recovery planning.
- Implement WAN, MAN, and SD-WAN solutions across multi-site environments.
- Design and manage secure cloud connectivity (VPN, Direct Connect, etc.) between on-prem and public cloud environments.
- Plan and optimize network capacity, performance tuning, and configuration standards.
- Maintain security across the enterprise network; monitor for threats and respond to security incidents.
- Perform network maintenance, including upgrades, patches, hotfixes, and secure configurations.
- Develop and maintain automation scripts and tools using GitLab, Ansible, or Python.
- Produce clear and comprehensive technical documentation for network deployment, configuration, and management.
- Participate in IT security audits and ensure compliance with organizational and regulatory standards.
- Serve as a trusted advisor to stakeholders, effectively translating technical details into business value.
Qualifications:
- 4+ years of experience with Palo Alto Networks technologies, including:
- Prisma Cloud, Next-Generation Firewalls, Cortex XDR, Panorama, Pan-OS, GlobalProtect
- 5+ years of experience in enterprise network design and support, including:
- vPC, VXLAN, BGP, OSPF, 802.1X, LAN/WAN/WLAN, VPNs, Firewalls, Load Balancers
- Proven experience with Cisco, Fortinet, and cloud networking in Azure and/or AWS
- Familiarity with network security frameworks and access technologies (NAC, SAML, SSO)
- Strong scripting and automation skills using GitLab, Ansible, Python, or similar tools
- Excellent problem-solving, communication, and documentation skills
Preferred Certifications:
- Palo Alto: PCNSE, PCNSA, PCSAE
- Other: CCNP, NSE4–6, AZ-700, or equivalent certifications
Required Technical Skills:
- Expert knowledge of Cisco IOS, NXOS, routing protocols (BGP, OSPF, EIGRP), MPLS, and VXLAN
- Strong experience with datacenter virtualization technologies
- Deep understanding of cloud infrastructure and networking in Azure or AWS
- Knowledge of Cisco and comparable VoIP/telephony systems
- Experience designing and deploying large-scale network architectures using Fortinet, Palo Alto, or Cisco
- Familiarity with wireless networking (802.11) and end-user device connectivity
- In-depth understanding of QoS, traffic shaping, and secure access methods (802.1X, SAML/SSO)
- Proven experience resolving complex Tier 3 network incidents
If you're looking for a dynamic role where you can have a meaningful impact on a global scale, SHI is the place for you. Join us and help shape the future of secure, scalable enterprise networking.