Skip to content
Talento
Sign inGet started

Talento

Upload your CV, set your preferences, and find jobs that fit.

PrivacyTermsCookiesAccessibility

← All roles

Senior Infrastructure Security Engineer-L3 (Palo Alto & NGFW)

at Gruve

Mumbai, Maharashtra, India, onsite, senior, full time, 5–8 years

posted 25 May 2026

Apply for this roleSign in to track your application
  • GlobalProtect VPN
  • Change Management
  • WildFire
  • Threat Prevention
  • ITSM
  • BGP
  • VLAN
  • PAN-OS
  • App-ID
  • User-ID
  • Panorama
  • Content-ID
  • Problem Management
  • Palo Alto Networks NGFW
  • Incident Management
  • URL Filtering
  • IPSec VPN
  • SD-WAN
  • SSL-VPN
  • OSPF

About the role

Posted: 2026-05-25

About Gruve

Gruve is an innovative software services startup dedicated to transforming enterprises to AI powerhouses. We specialize in cybersecurity, customer experience, cloud infrastructure, and advanced technologies such as Large Language Models (LLMs). Our mission is to assist our customers in their business strategies utilizing their data to make more intelligent decisions. As a well-funded early-stage startup, Gruve offers a dynamic environment with strong customer and partner networks.

Location - Navi Mumbai, India

We are seeking an experienced and proactive Senior Infrastructure Security Engineer with strong expertise in Palo Alto Networks NGFW and Panorama administration. The candidate will be deployed at the client site and will serve as the primary technical point of contact for all Palo Alto-related operations and support activities. The role involves managing firewall infrastructure, leading L2 support operations, handling escalations, mentoring junior engineers, and ensuring high availability and security compliance across the client’s network environment. The ideal candidate should possess strong troubleshooting skills, client-handling experience, and the ability to work independently in a managed services environment.

What you would do

- Lead L2/L3 support for Palo Alto Networks NGFW (PA-Series) infrastructure across the client environment.

- Manage and troubleshoot security policies, NAT rules, routing, zones, and VPN configurations.

- Monitor firewall health, traffic logs, threat prevention dashboards, and perform proactive remediation.

- Perform firmware upgrades, hotfix deployments, and HA failover testing with minimal downtime.

- Administer Panorama for centralized firewall policy and configuration management.

- Configure and manage device groups, templates, template stacks, shared objects, and log collectors in Panorama.

- Handle log collection, reporting, and forwarding profiles through Panorama.

- Act as the Single Point of Contact (SPOC) for all Palo Alto-related operational issues at the client site.

- Coordinate with Palo Alto TAC, internal support teams, and stakeholders for escalations and issue resolution.

Read from job-boards.greenhouse.io, last seen 4d ago.

- Mentor junior engineers and review configuration changes and operational activities.

- Manage incident, problem, and change management activities aligned with SLA requirements.

- Conduct RCA (Root Cause Analysis) and maintain operational documentation including SOPs, runbooks, and handover notes.

- Prepare MIS reports, operational dashboards, and client status reports.

Technical Skills

- Hands-on experience with Palo Alto Networks NGFW (PA-54K to PA-5K series)

- Strong expertise in PAN-OS administration and troubleshooting

- Deep understanding of Panorama administration including device groups, templates, and log collectors

- Experience with App-ID, User-ID, Content-ID, Threat Prevention, URL Filtering, and WildFire

- Knowledge of HA configurations (Active/Passive and Active/Active)

- Experience with GlobalProtect VPN, IPSec VPN, and SSL-VPN

- Good understanding of networking concepts including BGP, OSPF, VLANs, routing, and SD-WAN basics

- Familiarity with ITSM processes including Incident, Problem, and Change Management

- Experience with firmware upgrades, policy optimization, and firewall performance monitoring

What they are looking for

- Bachelor’s degree in computer science, Information Technology, Engineering, or related field

- 5–8 years of hands-on experience in Palo Alto Networks support and administration

- Strong client-facing experience in managed services or consulting environments

- Excellent troubleshooting, analytical, and communication skills

- Ability to work independently at client site with minimal supervision

- Experience in stakeholder management and mentoring junior engineers

- Mandatory Certification:

- PCNSE (Palo Alto Networks Certified Network Security Engineer)

- Palo Alto Network Security Professional

- PCNSA (Palo Alto Networks Certified Network Security Administrator)

- ITIL Foundation v3/v4 certification

- CCNP Security or equivalent networking certification

- Experience working in enterprise or client-site deployment environments

- Strong documentation and operational reporting skills

- Exposure to security operations and enterprise network security architecture

Why Gruve

At Gruve, we foster a culture of innovation, collaboration, and continuous learning. We are committed to building a diverse and inclusive workplace where everyone can thrive and contribute their best work. If you’re passionate about technology and eager to make an impact, we’d love to hear from you.

Gruve is an equal opportunity employer. We welcome applicants from all backgrounds and thank all who apply; however, only those selected for an interview will be contacted.