HCLTech is seeking two experienced professionals under one integrated critical role covering hybrid cloud and enterprise networking, multi-vendor firewall and VPN engineering, and controlled change execution. The team will provide senior technical ownership across on-premises, data-center and public-cloud environments, resolve complex incidents, lead root-cause analysis, deliver high-risk changes, strengthen security and operational resilience, and mentor L1/L2 engineers.
• Act as the highest-level internal escalation point for firewall and VPN incidents, resolving complex, high-severity issues within SLA.
• Perform deep-dive troubleshooting across Palo Alto, Fortinet, and Cisco FTD firewalls, including packet captures, session/flow analysis, and log correlation.
• Design, review, and validate firewall rulebases, security policies, NAT, routing, and high-availability configurations.
• Own the configuration, optimization, and troubleshooting of VPN and connectivity services: Remote Access VPN (RAVPN), Client-to-Site (C2S), Site-to-Site (S2S), and SD-WAN.
• Manage and maintain centralized management platforms — Panorama, FortiManager/FortiAnalyzer, and Cisco FMC — including policy push, object management, upgrades, and health monitoring.
• Plan and execute firmware/software upgrades, patching, and hardware refreshes with proper change management.
• Conduct root cause analysis (RCA) for recurring and major incidents and drive permanent corrective actions.
• Harden firewall configurations against security best practices and support audit, compliance, and vulnerability remediation activities.
• Create and maintain HLDs/LLDs, runbooks, SOPs, and knowledge base articles.
• Engage and manage vendor TAC cases through to resolution.
• Mentor and provide technical guidance to L1 and L2 engineers.
• Participate in an on-call rotation for critical escalations.
Firewall Platforms
• Palo Alto Networks (PA): Advanced hands-on experience with PA-Series NGFW, App-ID, User-ID, Content-ID, security profiles, zones, and troubleshooting.
• Fortinet (FortiGate): Strong expertise in FortiGate NGFW policy design, security profiles, VDOMs, and troubleshooting.
• Cisco FTD & FMC: Solid experience administering and troubleshooting Cisco Firepower Threat Defense (FTD) firewalls managed via Firepower Management Center (FMC).
Management Platforms
• Panorama – centralized management for Palo Alto.
• FortiManager / FortiAnalyzer – centralized management, logging, and reporting for Fortinet.
• Cisco FMC – centralized management for FTD.
Connectivity & VPN Services
• RAVPN (Remote Access VPN): GlobalProtect, FortiClient/SSL-VPN, Cisco AnyConnect/Secure Client.
• C2S (Client-to-Site): Client-based secure remote connectivity.
• S2S (Site-to-Site VPN): IPsec/IKEv1/IKEv2 tunnels, route-based and policy-based VPNs.
• SD-WAN: Design, deployment, and troubleshooting on Fortinet, Palo Alto (Prisma SD-WAN), and/or Cisco platforms.
Core Networking
• Strong TCP/IP, routing (BGP, OSPF, static), NAT, VLANs, and QoS fundamentals.
• Proficiency with packet capture and analysis (Wireshark, tcpdump, platform-native captures).
• High Availability (Active/Passive, Active/Active) design and troubleshooting.
Secondary (Good-to-Have) Skills
• Cloud security and firewalling (Azure, AWS, GCP) and Prisma Access / SASE.
• Zero Trust Network Access (ZTNA) concepts and deployment.
• Automation and scripting (Python, Ansible, REST APIs) for policy and configuration management.
• Integration with SIEM, NAC, and MFA/identity solutions.
• Experience with ITSM tools (ServiceNow) and structured change/incident/problem management (ITIL).
• Basic knowledge of Tufin, XSOAR
Source: HCLTech careers — Read the original posting and apply
This role is listed by the employer on its own careers site. Kaam Ki Khoj does not process applications for it.
HCLTech is an employer in the IT/Computers - Software, Software Services sector with operations in India. This is a directory listing maintained by Kaam Ki Khoj so that candidates can find the organisation; it is not an official company page and Kaam... Read More
Upload your CV once — we read it, build your profile and put you in front of every employer hiring on Kaam Ki Khoj. No forms, no fees.
