Network Security Engineer - Telco Virtual Firewalls

Practice / Domain

Cyber Security – Telco Cloud & Network Security

Experience Range

5 – 12 Years

Support Model

24x7 Operations (Telco-grade SLA-driven environment)

Role Summary

The Network Security Engineer is responsible for design, deployment, and operations of Telco-grade Virtual Firewalls (vFW) using Palo Alto technologies within Telco cloud (NFV/SDN) environments.

This role ensures secure traffic segmentation, high availability, and scalable firewall deployments supporting carrier-grade networks, VNF architectures, and multi-tenant Telco environments.

Key Responsibilities

1. Telco Virtual Firewall (Palo Alto) Operations

• Deploy, configure, and manage Palo Alto Virtual Firewalls (VM-Series / CN-Series) in Telco cloud
• Configure:
• Security policies (App-ID, URL filtering, NAT, segmentation)
• Threat prevention (IPS, Anti-malware, WildFire)
• Perform log analysis, traffic inspection, and threat detection
• Ensure policy enforcement across Telco network segments and trust zones

2. Telco Cloud / NFV Security Implementation

• Deploy firewalls as Virtual Network Functions (VNFs) in Telco cloud environments
• Integrate with:
• NFV orchestrators / SDN controllers
• Telco cloud platforms (OpenStack / Kubernetes)
• Ensure:
• Secure communication between VNFs
• Controlled access using IP/Port/Application-level filtering

3. Traffic Engineering & Connectivity Security

• Configure and manage:
• Routing protocols (BGP, static routing)
• VPNs (IPSec, site-to-site connectivity)
• Perform deep packet inspection (DPI) and traffic flow analysis
• Secure north-south and east-west traffic flows in Telco networks

4. High Availability & Carrier-Grade Design

• Implement HA (active-active / active-passive) setups for virtual firewalls
• Support:
• Geo-redundant deployments
• Fault-tolerant designs aligned to Telco standards
• Ensure no service impact from VNF/node/site failures

5. Monitoring, Incident & Change Management

• Monitor firewall health, logs, and alerts
• Perform L2/L3 troubleshooting for high-severity incidents
• Execute change, incident, and problem management (ITIL aligned)
• Collaborate with NOC, SOC, and Telco operations teams

6. Governance, Compliance & Security Assurance

• Ensure firewall configurations meet:
• Telco security standards (ETSI / NFV guidelines)
• Enterprise compliance requirements
• Support audits with logs, reports, and evidence
• Perform policy optimization, cleanup, and compliance validation

Mandatory Skills

Core Technical Skills

• Hands-on experience with:
• Palo Alto Virtual Firewalls (VM-Series / CN-Series)
• Panorama for centralized firewall management
• Strong knowledge of:
• NGFW features (App-ID, User-ID, Content-ID, IPS)
• Firewall policy design and segmentation

Telco / Cloud Exposure

• Experience in:
• Telco cloud / NFV environments
• Virtual firewall deployments at scale
• Understanding of:
• VNF lifecycle and orchestration
• SDN-based network security

Networking Fundamentals

• Strong understanding of:
• TCP/IP, BGP, routing, NAT
• Network segmentation and Zero Trust
• Experience with:
• VPNs (IPSec, SSL VPN)
• Traffic analysis and debugging

Desired / Good-to-Have Skills

• Experience with:
• Multi-vendor Telco firewalls
• Kubernetes / container security (CN-Series)
• Automation:
• Python / Ansible / REST APIs
• Exposure to:
• 5G / LTE network security
• Cloud-native security controls

Certifications (Preferred)

• Palo Alto:
• PCNSE / PCNSA
• Network / Telco:
• CCNP / CCIE (Security or Service Provider)
• Cloud / Telco:
• NFV / Telco cloud certifications (optional)

Soft Skills

• Strong troubleshooting and analytical skills
• Ability to operate in high pressure, carrier-grade environments
• Effective collaboration across global teams (NOC, SOC, Engineering)
• Strong communication for client and stakeholder engagement

Key Outcomes / Success Metrics

• High availability of Telco firewall services (carrier-grade SLAs)
• Secure segmentation and traffic isolation across VNFs
• Reduction in security incidents and faster RCA
• Improved policy compliance and audit readiness

About Infosys

Infosys is a global leader in next-generation digital services and consulting. We enable clients in 59 countries to navigate their digital transformation.

With over four decades of experience in managing the systems and workings of global enterprises, we expertly steer clients, in 59 countries, as they navigate their digital transformation powered by cloud and AI. We enable them with an AI-first core, empower the business with agile digital at scale and drive continuous improvement with always-on learning through the transfer of digital skills, expertise, and ideas from our innovation ecosystem. We are deeply committed to being a well-governed, environmentally sustainable organization where diverse talent thrives in an inclusive workplace.