Network Security Engineer

About TCS.

Tata Consultancy Services is an IT services, consulting and business solutions organization that delivers real results to global business, ensuring a level of certainty no other firm can match. TCS offers a consulting-led, integrated portfolio of IT, BPO, infrastructure, engineering and assurance services. This is delivered through its unique Global Network Delivery Model™, recognized as the benchmark of excellence in software development. A part of the Tata group, India’s largest industrial conglomerate, TCS has over 276,000 of the world’s best-trained consultants in 44 countries. The company generated consolidated revenues of US $11.6 billion for year ended March 31, 2013 and is listed on the National Stock Exchange and Bombay Stock Exchange in India. For more information, visit us at www.tcs.com.

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• 5-7 years of experience in network security engineering.
• 5+ years of experience in managing and administering PaloAlto Globalprotect and Prisma Access (ZTNA)

Certifications (Preferred) * PCNSE (highly preferred) * Palo Alto Networks SASE Administrator / Prisma Certified Cloud Security Engineer

Hands-on with:

• Palo Alto NGFW (hardware/virtual)
• Panorama & Strata Cloud Manager
• GlobalProtect VPN (L3-level experience)
• Prisma Access (Mobile Users / Service Connections / ZTNA)
• BGP, IPSec, GRE tunnels

Strong understanding of:

• Enterprise authentication (AD, SAML, MFA)
• Zero Trust Network Architecture
• Cloud networking (AWS/Azure/GCP – nice to have)
• SSL/TLS, certificate management

Roles & Responsibilities

GlobalProtect VPN

• Design, deploy, and optimize GlobalProtect portal & gateway configurations.
• Manage authentication profiles (SAML, LDAP, RADIUS) and MFA integrations.
• Configure and maintain HIP profiles, agent settings, and split tunneling.
• Troubleshoot complex VPN issues from endpoint, firewall, and cloud perspectives.
• Perform log analysis using Panorama / Prisma Access logs.

Prisma Access (Strata Cloud Manager)

• Manage Prisma Access deployments including:
• Mobile Users o Remote Network deployments
• Service Connections (for on-prem traffic to cloud)
• Configure and tune security policies, decryption profiles, and URL filtering.
• Oversee upgrades, commits, and cloud tenant operations.

ZTNA Connectors

• Deploy and manage Zero Trust Network Access (ZTNA) connectors.
• Work with application teams to onboard private applications.
• Ensure continuous access, routing optimization, and failover.

Infrastructure Integration

• Configure BGP/Static routes for Service Connections & Remote Networks.
• Troubleshoot connectivity issues across on-prem firewalls and cloud edges.
• Support hybrid environments: on-prem data centers, multi-cloud (AWS/Azure/GCP).