About TCS:
Join Tata Consultancy Services, Asia Pacific and be part of an organization committed to sustainable development for our future. TCS follows the Tata group philosophy of building sustainable businesses that are rooted in the community and demonstrate care for the environment. Our unique values position us to combine a purpose-driven worldview with digital innovation, collaborating with customers, communities and governments to lead and shape innovative solutions for a sustainable future. TCS has been carbon neutral in its operations across 11 countries, 12 delivery centres and 18 offices in Asia Pacific since 2022. This is only the initial stage in TCS journey as we strive to achieve long-term net zero emissions by 2030.
Required Qualifications
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.
- 5-7 years of experience in network security engineering.
- 5+ years of experience in managing and administering PaloAlto Globalprotect and Prisma Access (ZTNA)
Certifications (Preferred)
- PCNSE (highly preferred)
- Palo Alto Networks SASE Administrator / Prisma Certified Cloud Security Engineer
Hands-on with:
- Palo Alto NGFW (hardware/virtual)
- Panorama & Strata Cloud Manager
- GlobalProtect VPN (L3-level experience)
- Prisma Access (Mobile Users / Service Connections / ZTNA)
- BGP, IPSec, GRE tunnels
Strong understanding of:
- SSL/TLS, certificate management
- Enterprise authentication (AD, SAML, MFA)
- Zero Trust Network Architecture
- Cloud networking (AWS/Azure/GCP – nice to have)
Roles & Responsibilities
GlobalProtect VPN
- Design, deploy, and optimize GlobalProtect portal & gateway configurations.
- Manage authentication profiles (SAML, LDAP, RADIUS) and MFA integrations.
- Configure and maintain HIP profiles, agent settings, and split tunneling.
- Troubleshoot complex VPN issues from endpoint, firewall, and cloud perspectives.
- Perform log analysis using Panorama / Prisma Access logs.
Prisma Access (Strata Cloud Manager)
- Manage Prisma Access deployments including:
- Mobile Users
- Remote Network deployments
- Service Connections (for on-prem traffic to cloud)
- Configure and tune security policies, decryption profiles, and URL filtering.
- Oversee upgrades, commits, and cloud tenant operations.
ZTNA Connectors
- Deploy and manage Zero Trust Network Access (ZTNA) connectors.
- Work with application teams to onboard private applications.
- Ensure continuous access, routing optimization, and failover.
Infrastructure Integration
- Configure BGP/Static routes for Service Connections & Remote Networks.
- Troubleshoot connectivity issues across on-prem firewalls and cloud edges.
- Support hybrid environments: on‑prem data centers, multi‑cloud(AWS/Azure/GCP).
L3 Troubleshooting
- Act as the final escalation point for GlobalProtect & Prisma Access issues.
- Lead root cause analysis (RCA) for complex incidents.
- Provide guidance to L1/L2 teams and create runbooks.
Operational & Governance
- Maintain security posture and ensure compliance with policies.
- Implement best practices for SASE, VPN, and zero-trust architecture.
- Document configurations, diagrams, and change management tasks.
