CDTR-Cybersecurity - Network -Senior Associate -Bangalore

At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data. Those in security architecture at PwC will focus on designing and implementing robust security frameworks to protect organisations from cyber threats. You will develop strategies and solutions to safeguard sensitive data and enable the integrity of systems and networks.

Experience in planning, configuration, and deployment of PA Firewalls Expert in troubleshooting, implementing, and configuring Panorama, Palo Alto firewalls. Analyzing the current PA environment and providing recommendations and implementation plans to upgrade the code, App-ID. Health Monitoring, Attack vector monitoring, Indicators of Compromise monitoring and blocking, Dynamic ACL monitoring and blocking. Configuring Panorama and managing the firewalls using Panorama. Familiar with Device groups & Templates, pre-rules, post rules & security profiles, the centralized push of security policies. VPN: Good knowledge on SSL VPN, IPSEC, Remote Access VPN, GRE over IPSEC VPN Responsible for development of Palo alto NextGen Network Security Components and Protocols for State-of-the-art firewalls deployed at Enterprise, Data Center, Cloud, and Service Provider environments. Palo Alto Firewall threat updates on periodic basis. Incident management, Change Management for different severity levels and following escalation matrix for ensuring SLA adherence. P1, P2 and P3 incidents monitoring and co-ordination with stakeholders for timely resolution. Expert in configuring routing protocols and documenting on Palo alto firewalls. Develop scalable flow architecture for tunneling protocols, mobility protocols, high availability solution for Stateful Failover. Experience & knowledge of Global protect VPN. Product visionary, ideas on the competitive edge, Effective decision-maker, take ownership and Independently drive, lead tasks and assignments. Assess tools, applications, systems, and infrastructures to ensure compliance security best practices, and that established baselines are maintained. Improve enterprise security architecture, designing and implementing remediation technologies, techniques, and processes. Monitor information security alerts and collaborate with other technical teams to respond, triage, and escalate as needed. Alerts include logs from firewalls, IDS, OS, Antivirus, databases, web application firewalls, and web servers. Audit the system environment and provide actionable information about risk discovery and create and maintain complex event alerts and summary reports.

Additional Skills – Good to have Routing: Routing static/dynamic routing RIP, EIGRP, OSPF and BGP.

Configuring GRE, WAN QOS, Cisco IP SLA, and Policy based routing, redistribution.

○ Switching: Cisco Catalyst switches, Nexus Switching, VLAN, VTP, STP, RSTP, Port Security, VPC,

FEX, Fabric path, OTV, VDCs, Spine and leaf Architectures, VXLAN

○ Software-Defined Networking / SD-WAN

○ Network and Security Governance/Network and Security Strategy

○ Data Center Application Migration Roadmap and Consolidation Strategy

○ Cloud Architecture Design & Strategy and Cloud Interconnect

○ Data Center Network Architecture

○ Zero Trust Strategy & Architecture, Network Segmentation & Zoning Strategy

○ Proven technical abilities and success with assisting managing projects

○ Evaluating and implementing large IT Network and Security Transformation initiatives

○ Cloud Infrastructure Foundation Knowledge

○ Exposure and experience on different Industrial frameworks and regulatory. Example - PCI, NIST,

FFIEC, CIS

○ Able to communicate with the users and technical teams

Worked in an offshore/onsite engagement