Security Remote Field Service Engineer (L4)

Key Responsibilities. Security Architecture & Governance. Serve as the primary Subject Matter Expert (SME) for Palo Alto and Check Point security platforms. Design and review enterprise-grade security architectures across datacenter, perimeter, cloud, and hybrid environments. Establish and enforce firewall governance standards, security baselines, and industry best practices. Drive security architecture reviews and provide technical approval for major network and security changes. Lead Zero Trust, micro-segmentation, and secure network access initiatives. Palo Alto & Check Point Engineering. Design, implement, and maintain complex firewall infrastructures including high-availability and multi-datacenter deployments. Manage Palo Alto Panorama, device groups, templates, WildFire, URL Filtering, Anti-Spyware, Vulnerability Protection, DNS Security, and GlobalProtect solutions. Manage Check Point Security Management, Threat Prevention, VSX, ClusterXL, Identity Awareness, and Application Control solutions. Lead firewall policy design, optimization, rule recertification, and rulebase cleanup activities. Design and implement complex NAT, VPN, routing, and security segmentation requirements. Security Best Practices & Compliance. Ensure firewall configurations align with industry best practices, CIS benchmarks, RBI guidelines, ISO 27001, PCI-DSS, and internal security standards. Perform periodic security posture assessments and recommend improvements to reduce risk exposure. Conduct configuration reviews, policy audits, compliance assessments, and security gap analysis. Define and maintain secure configuration standards and hardening guidelines. Incident & Problem Management. Act as the final technical escalation point (L4) for critical security incidents and platform outages. Lead complex troubleshooting activities involving network, firewall, VPN, IPS, and application security issues. Perform deep packet analysis, root cause analysis, and post-incident reviews. Drive containment, remediation, and recovery efforts during major security incidents. Develop preventive measures based on recurring incidents and problem trends. Engineering & Technical Leadership. Provide technical leadership and mentorship to L1, L2, and L3 engineers. Review technical solutions and implementation plans before production deployment. Lead knowledge-sharing sessions and capability development programs. Interface with OEM support teams and vendors for critical issue resolution and product enhancements. Participate in architecture review boards and technology governance committees. Technology Lifecycle Management. Own platform lifecycle management including upgrades, migrations, patching, and hardware refresh initiatives. Ensure timely deployment of security updates, signatures, and threat intelligence feeds. Plan and execute major version upgrades with minimal business impact. Develop rollback and recovery strategies for mission-critical environments. Ensure high availability, performance optimization, and capacity planning of security platforms. Documentation & Continuous Improvement. Maintain and regularly update HLDs, LLDs, architecture diagrams, operational procedures, and runbooks. Contribute to security roadmap planning and strategic technology initiatives. Evaluate emerging security technologies and recommend enhancements. Drive automation opportunities and operational process improvements. Identify and implement measures to improve operational efficiency and strengthen organizational security posture. Essential Experience. Minimum 10+ years of hands-on experience with Palo Alto and/or Check Point platforms. Strong expertise in firewall architecture, policy management, threat prevention, and VPN technologies. Experience supporting large-scale enterprise or banking environments. Proven experience handling critical incidents and complex troubleshooting scenarios. Strong understanding of network protocols, routing, switching, and security architecture.