{"id":2521428,"url":"https://alion.io/job/hcltech-technical-specialist-git-4","title":"Technical Specialist-GIT","company":{"id":225,"name":"HCLTech","domain":"hcltech.com","url":"https://alion.io/company/hcltech","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Sales","role_family":"Sales","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Noida, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"BGP","optional":false},{"name":"FortiGate","optional":false},{"name":"OSPF","optional":false},{"name":"SLI/SLO/SLA","optional":false},{"name":"TCP/IP","optional":false},{"name":"Tcpdump","optional":false},{"name":"VPN","optional":false},{"name":"Wireshark","optional":false},{"name":"Ansible","optional":true},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"Configuration Management","optional":true},{"name":"GCP","optional":true},{"name":"Incident Management","optional":true},{"name":"ITIL","optional":true},{"name":"ITSM","optional":true},{"name":"Python","optional":true},{"name":"Rest API","optional":true},{"name":"ServiceNow","optional":true},{"name":"SIEM","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-10-14T11:08:25Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-10-14T22:22:56Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Job Summary\nHCLTech is looking for an accomplished Firewall Security Compliance Engineer for its Noida location. This is a critical technology role responsible for engineering, operational stability, security, service resilience and continuous improvement across a complex enterprise environment. The role requires deep hands-on expertise, disciplined change execution, strong troubleshooting capability and effective collaboration with infrastructure, application, security, service-management and vendor teams.\nKey Responsibilities\nLead firewall security compliance and audit remediation across Palo Alto, Fortinet and Cisco FTD/FMC platforms.\nAssess and remediate rulebase, NAT, HA, VPN, SD-WAN, access, logging and policy hygiene gaps.\nPerform advanced troubleshooting using packet captures, session/flow analysis and log correlation.\nManage Panorama, FortiManager/FortiAnalyzer and Cisco FMC, including upgrades, patching, health monitoring and vendor TAC cases.\nDocument evidence, RCA, HLD/LLD, SOPs and runbooks while ensuring stable, secure and compliant operations.\nSkill Requirements\nExperienced Compliance Level 3 (L3) Firewall Engineer to serve as the senior technical authority for the enterprise network security infrastructure. This role owns advanced troubleshooting, design validation, escalation resolution, and lifecycle management across multi-vendor firewall platforms (Palo Alto Networks, Fortinet, and Cisco FTD/FMC) and the connectivity services that run on them, including Remote Access VPN, Client-to-Site, Site-to-Site VPN, and SD-WAN. As the final internal escalation point below vendor TAC, the L3 Engineer resolves complex incidents, drives root cause analysis, mentors L1/L2 staff, and ensures the security estate remains stable, secure, and compliant. Key Responsibilities\nAct as the highest-level internal escalation point for firewall and VPN incidents, resolving complex, high-severity issues within SLA.\nPerform deep-dive troubleshooting across Palo Alto, Fortinet, and Cisco FTD firewalls, including packet captures, session/flow analysis, and log correlation.\nDesign, review, and validate firewall rulebases, security policies, NAT, routing, and high-availability configurations.\nOwn the configuration, optimization, and troubleshooting of VPN and connectivity services: Remote Access VPN (RAVPN), Client-to-Site (C2S), Site-to-Site (S2S), and SD-WAN.\nManage and maintain centralized management platforms - Panorama, FortiManager/FortiAnalyzer, and Cisco FMC - including policy push, object management, upgrades, and health monitoring.\nPlan and execute firmware/software upgrades, patching, and hardware refreshes with proper change management.\nConduct root cause analysis (RCA) for recurring and major incidents and drive permanent corrective actions.\nHarden firewall configurations against security best practices and support audit, compliance, and vulnerability remediation activities.\nCreate and maintain HLDs/LLDs, runbooks, SOPs, and knowledge base articles.\nEngage and manage vendor TAC cases through to resolution.\nMentor and provide technical guidance to L1 and L2 engineers.\nParticipate in an on-call rotation for critical escalations. Primary (Must-Have) Skills Firewall Platforms\nPalo Alto Networks (PA): Advanced hands-on experience with PA-Series NGFW, App-ID, User-ID, Content-ID, security profiles, zones, and troubleshooting.\nFortinet (FortiGate): Strong expertise in FortiGate NGFW policy design, security profiles, VDOMs, and troubleshooting.\nCisco FTD & FMC: Solid experience administering and troubleshooting Cisco Firepower Threat Defense (FTD) firewalls managed via Firepower Management Center (FMC). Management Platforms\nPanorama - centralized management for Palo Alto.\nFortiManager / FortiAnalyzer - centralized management, logging, and reporting for Fortinet.\nCisco FMC - centralized management for FTD. Connectivity & VPN Services\nRAVPN (Remote Access VPN): GlobalProtect, FortiClient/SSL-VPN, Cisco AnyConnect/Secure Client.\nC2S (Client-to-Site): Client-based secure remote connectivity.\nS2S (Site-to-Site VPN): IPsec/IKEv1/IKEv2 tunnels, route-based and policy-based VPNs.\nSD-WAN: Design, deployment, and troubleshooting on Fortinet, Palo Alto (Prisma SD-WAN), and/or Cisco platforms. Core Networking\nStrong TCP/IP, routing (BGP, OSPF, static), NAT, VLANs, and QoS fundamentals.\nProficiency with packet capture and analysis (Wireshark, tcpdump, platform-native captures).\nHigh Availability (Active/Passive, Active/Active) design and troubleshooting. Secondary (Good-to-Have) Skills\nCloud security and firewalling (Azure, AWS, GCP) and Prisma Access / SASE.\nZero Trust Network Access (ZTNA) concepts and deployment.\nAutomation and scripting (Python, Ansible, REST APIs) for policy and configuration management.\nIntegration with SIEM, NAC, and MFA/identity solutions.\nExperience with ITSM tools (ServiceNow) and structured change/incident/problem management (ITIL).\nBasic kn\nOther Requirements\nDETAILED ROLE ACCOUNTABILITIES\nLead firewall risk, policy-governance, recertification and audit-remediation activities across Palo Alto, Fortinet and Cisco estates.\nIdentify and remediate overly permissive, unused, duplicate, shadowed, expired or non-compliant rules and objects.\nValidate logging, administrator access, backup, HA, software, certificate, VPN and security-profile controls.\nProduce clear evidence, exception records, remediation trackers, RCA and governance reporting for stakeholders.\nPartner with application, network, security and audit teams to deliver risk reduction without disrupting services.\nDESIRED CERTIFICATIONS (GOOD TO HAVE)\nPalo Alto PCNSE\nFortinet NSE 4 or above\nCisco CCNP Security/CCIE Security\nCCNP\nITIL Foundation.\nPROFICIENCY EXPECTATIONS\nCompetent (L3): Independently deliver firewall compliance and audit requirements, mitigate firewall/VPN gaps, execute complex changes and validate rulebases, NAT, HA and VPN/SD-WAN configurations.\nProficient (L4): Own enterprise firewall/security-connectivity architecture, governance, standards and compliance frameworks; lead vendor escalations and mentor L3 engineers.\nCANDIDATE PROFILE\nStrong hands-on experience in the stated technology domain and enterprise operations environment.\nAbility to independently troubleshoot complex issues, document solutions and collaborate with cross-functional stakeholders.\nStrong communication, change management, incident management and problem-solving skills.\nWillingness to work from the Noida location and support operational requirements as applicable.\nREQUIRED EXPERIENCE AND CAPABILITIES\nBachelor’s degree in Computer Science, Information Technology, Engineering or a related discipline, or equivalent relevant experience.\nDemonstrated hands-on experience supporting business-critical enterprise environments and handling complex incidents and changes.\nWorking knowledge of ITIL-aligned incident, problem, change, request and knowledge-management processes.\nAbility to create HLD/LLD, implementation plans, rollback plans, SOPs, runbooks, RCA documents and operational reports.\nStrong stakeholder communication, ownership, analytical thinking and collaboration across application, infrastructure, security and vendor teams.\nAbility to participate in operational support, planned changes and major-incident activities according to business requirements.\nKEY DELIVERABLES\nStable, secure and supportable technology services with improved availability, performance and operational readiness.\nTimely resolution of complex incidents, complete root-cause analysis and closure of preventive actions.\nHigh-quality technical designs, implementation evidence, knowledge articles and support documentation.\nControlled delivery of upgrades, migrations, standardization, automation and service-improvement initiatives.\nClear technical communication with stakeholders, service owners, partner teams and technology vendors.\nSELECTION FOCUS\nDepth of hands-on technical knowledge and ability to explain design and troubleshooting decisions.\nExperience with enterprise-scale operations, critical incidents, controlled changes and service restoration.\nQuality of documentation, automation mindset, security awareness and approach to continuous improvement.\nCommunication, ownership and ability to work effectively across multiple technical and business teams","description_format":"text","description_chars":8320,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams","Systems Integrators"],"lifecycle":[{"event":"open","at":"2026-10-14T11:08:25Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":14,"reasons":["conf:0","win:early","comp:brand"],"computed_at":"2026-10-14T22:34:31Z"},"pay":null,"html_url":"https://alion.io/job/hcltech-technical-specialist-git-4","json_url":"https://alion.io/job/hcltech-technical-specialist-git-4.json","meta":{"generated_at":"2026-10-14T22:34:31Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":30446,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":225},"rest":"https://alion.io/mcp/rest/get_company?id=225"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhcltech-technical-specialist-git-4"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhcltech-technical-specialist-git-4"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhcltech-technical-specialist-git-4"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/hcltech-technical-specialist-git-4\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhcltech-technical-specialist-git-4"}]}