Infosys
Posted 3mo ago

Technology Analyst

Infosys
Bucharest or Targu Mures or Timisoara or Mureș County or Timiș County or Romania or Wisconsin
OnsiteFull Time
Responsibilities
  • deploying firewalls
  • monitoring traffic
  • troubleshooting incidents
Requirements
  • Design
  • Deploy, and operate Palo Alto virtual firewalls in Telco cloud/NFV/SDN environments
  • Implement segmentation, HA
  • Routing/VPNs
  • Monitoring
  • Incident management, and automation (Python/Ansible/REST)
Technical tools mentioned
Palo Alto Virtual Firewalls (VM-Series / CN-Series)PanoramaWildFireOpenStackKubernetesBGPIPSecSSL VPNPythonAnsibleREST APIsDPINFVSDN

Job description

Job Description

Role Summary

The Network Security Engineer is responsible for design, deployment, and operations of Telco-grade Virtual Firewalls (vFW) using Palo Alto technologies within Telco cloud (NFV/SDN) environments.

This role ensures secure traffic segmentation, high availability, and scalable firewall deployments supporting carrier-grade networks, VNF architectures, and multi-tenant Telco environments.



Key Responsibilities

1. Telco Virtual Firewall (Palo Alto) Operations
  • Deploy, configure, and manage Palo Alto Virtual Firewalls (VM-Series / CN-Series) in Telco cloud
  • Configure:
    • Security policies (App-ID, URL filtering, NAT, segmentation)
    • Threat prevention (IPS, Anti-malware, WildFire)
  • Perform log analysis, traffic inspection, and threat detection
  • Ensure policy enforcement across Telco network segments and trust zones



2. Telco Cloud / NFV Security Implementation
  • Deploy firewalls as Virtual Network Functions (VNFs) in Telco cloud environments
  • Integrate with:
    • NFV orchestrators / SDN controllers
    • Telco cloud platforms (OpenStack / Kubernetes)
  • Ensure:
    • Secure communication between VNFs
    • Controlled access using IP/Port/Application-level filtering



3. Traffic Engineering & Connectivity Security
  • Configure and manage:
    • Routing protocols (BGP, static routing)
    • VPNs (IPSec, site-to-site connectivity)
  • Perform deep packet inspection (DPI) and traffic flow analysis
  • Secure north-south and east-west traffic flows in Telco networks



4. High Availability & Carrier-Grade Design
  • Implement HA (active-active / active-passive) setups for virtual firewalls
  • Support:
    • Geo-redundant deployments
    • Fault-tolerant designs aligned to Telco standards
  • Ensure no service impact from VNF/node/site failures



5. Monitoring, Incident & Change Management
  • Monitor firewall health, logs, and alerts
  • Perform L2/L3 troubleshooting for high-severity incidents
  • Execute change, incident, and problem management (ITIL aligned)
  • Collaborate with NOC, SOC, and Telco operations teams



6. Governance, Compliance & Security Assurance
  • Ensure firewall configurations meet:
    • Telco security standards (ETSI / NFV guidelines)
    • Enterprise compliance requirements
  • Support audits with logs, reports, and evidence
  • Perform policy optimization, cleanup, and compliance validation



Mandatory Skills
Core Technical Skills
  • Hands-on experience with:
    • Palo Alto Virtual Firewalls (VM-Series / CN-Series)
    • Panorama for centralized firewall management
  • Strong knowledge of:
    • NGFW features (App-ID, User-ID, Content-ID, IPS)
    • Firewall policy design and segmentation



Telco / Cloud Exposure
  • Experience in:
    • Telco cloud / NFV environments
    • Virtual firewall deployments at scale
  • Understanding of:
    • VNF lifecycle and orchestration
    • SDN-based network security



Networking Fundamentals
  • Strong understanding of:
    • TCP/IP, BGP, routing, NAT
    • Network segmentation and Zero Trust
  • Experience with:
    • VPNs (IPSec, SSL VPN)
    • Traffic analysis and debugging



Desired / Good-to-Have Skills
  • Experience with:
    • Multi-vendor Telco firewalls
    • Kubernetes / container security (CN-Series)
  • Automation:
    • Python / Ansible / REST APIs
  • Exposure to:
    • 5G / LTE network security
    • Cloud-native security controls



Certifications (Preferred)
  • Palo Alto:
    • PCNSE / PCNSA
  • Network / Telco:
    • CCNP / CCIE (Security or Service Provider)
  • Cloud / Telco:
    • NFV / Telco cloud certifications (optional)



Soft Skills
  • Strong troubleshooting and analytical skills
  • Ability to operate in high pressure, carrier-grade environments
  • Effective collaboration across global teams (NOC, SOC, Engineering)
  • Strong communication for client and stakeholder engagement



Key Outcomes / Success Metrics
  • High availability of Telco firewall services (carrier-grade SLAs)
  • Secure segmentation and traffic isolation across VNFs
  • Reduction in security incidents and faster RCA
  • Improved policy compliance and audit readiness

About Infosys
Infosys is a global leader in next-generation digital services and consulting. We enable clients in 46 countries to navigate their digital transformation. With over three decades of experience in managing the systems and workings of global enterprises, we expertly steer our clients through the many next of their digital journey. We do it by enabling the enterprise with an AI-powered core that helps prioritize the execution of change. We also empower the business with agile digital at scale to deliver unprecedented levels of performance and customer delight. Our always-on learning agenda drives their continuous improvement through building and transferring digital skills, expertise and ideas from our innovation ecosystem.
Visit www.infosys.com to see how Infosys can help your enterprise navigate your next.

All aspects of employment at Infosys are based on merit, competence and performance. We are committed to embracing diversity and creating an inclusive environment for all employees. Infosys is proud to be an equal opportunity employer

 

State / Region / Province

Bucharest, County Mures, County Timis, Wisconsin (ROU)

Country

Romania

Interest Group

Infosys Limited

Job Role

Technology Analyst

Company

IL Romania

Work Location

Bucharest, Targu Mures, County Mures, Timisoara, County Timis

Role Designation description

Technology Analyst

External Job Title

Network Security Engineer

About Infosys

Global leader in next-generation digital services and consulting.

Similar jobs

Network Security Engineer roles near Bucharest, Bucharest
2mo
Save
Mark Applied
Hide
Senior Network Security Engineer
Bucharest, Bucharest, Romania
OnsiteFull Time
SCOR
SCOREuronext Paris: SCR: Global reinsurance providing risk management solutions.
10+ YOE10+ years in security or infrastructure operations; deep firewall, policy automation, WAN/LAN and Azure networking knowledge; PKI and DNS experience; IaC and scripting (Terraform, Azure DevOps, GitLab, Python); CNAPP/WIZ familiarity; strong communication.
Palo Alto Networks Strata, Prisma Access, Tufin, CASB, DLP, BGP, OSPF, Azure, Virtual WAN, VPN Gateways, vNet peering, load balancing, PKI, DNS, Terraform, Azure DevOps, GitLab, Python, CNAPP, WIZ, Wireshark, SNMP, Imperva WAF, FortiNAC, Microsoft
4mo
Save
Mark Applied
Hide
Network Security Engineer (Bucharest, RO, 60044)
Bucharest, Bucharest, Romania
OnsiteFull Time
IDEMIA
IDEMIA: Global leader in biometric and security technologies.
3+ YOE3-5 years in Network Security; experience with Data Center networks; strong with Aruba/Cisco/Firepower/Fortinet; AWS/Azure; ITIL/ITSM; good English.
Aruba, HP, Cisco, Fortinet, BigIP, F5, Zabbix, Centreon, Observium, Smokeping, Cortex, Splunk, Arcsight, Zscaler, AWS, Azure
7mo
Save
Mark Applied
Hide
Network Security Lead Engineer (f/m/x)
Bucharest, /, Romania
HybridFull Time
Deutsche Bank
Deutsche BankXETRA: DBK: Global banking and financial services organization.
7+ YOEBachelor’s in CS or related; 7+ years network security; DNS security; Cisco Umbrella; SQL Server Management; certifications CISSP CCSP CCNA; regulatory compliance knowledge; strong collaboration.
Cisco Umbrella, SQL Server Management, Chronicle SOAR, DNS Security, Networking, Firewalls, Routing, KOP, LLD, Policy management
4mo
Save
Mark Applied
Hide
Senior Infrastructure & Network Security Engineer @ING Hubs Romania
Bucharest or Cluj-Napoca
OnsiteFull Time
ING Romania
ING Romania: Dutch universal bank serving Romanian individuals, entrepreneurs, companies and financial institutions.
Strong IT security foundation; experience with Azure, Kubernetes, Linux/Windows, databases; security assessments; clear communication; problem-solving and stakeholder collaboration.
Azure pipelines, Kubernetes, Virtual Machines, Databases, Application programming interfaces (APIs), Security fundamentals