Job Description

We are seeking an experienced Infrastructure Security Specialist to design, implement, and migrate secure network infrastructures for banking and financial services clients. The role focuses on firewall and proxy transformation to cloud, leveraging technologies such as Palo Alto, Prisma, and SD-WAN integration with infra security, while ensuring compliance with strict regulatory standards.

• Lead and execute network security transformation and migration projects for banking clients.
• Design and implement secure architecture across on-prem and cloud environments.
• Migrate and refactor:
  • Firewalls (physical/virtual to cloud-native)
  • Proxy services (on-prem to cloud/SASE models)
• Deploy and manage Palo Alto firewalls and Prisma (Access / SASE) solutions.
• Integrate SD-WAN with security frameworks (SASE architecture).
• Configure and manage:
  • Network security policies
  • NAT, VPNs (IPSec/SSL), and segmentation
• Perform security assessments, rule optimization, and policy cleanup during migrations.
• Develop migration strategies, runbooks, rollback plans, and validation procedures.
• Ensure compliance with banking regulatory standards and ensure security risk assessment
• Collaborate with cloud, network, and application teams for secure integration.
• Support cutover activities, including off-hours deployments when required.
• Conduct post-migration validation, hardening, and performance tuning.
• Maintain detailed documentation and support audit requirements.

• Strong hands-on experience in:
  • Next-Gen Firewalls (NGFW), especially Palo Alto
  • Proxy technologies (Blue Coat/Symantec, Zscaler, etc.)
  • VPNs, IPSec, SSL, network segmentation
• Deep understanding of:
  • Threat prevention, IDS/IPS
  • URL filtering, DLP basics
• Experience with:
  • Prisma Access / Prisma SASE
  • Cloud security architectures (AWS / Azure)
  • Secure access models (ZTNA, SASE)
• Experience integrating SD-WAN with security controls
• Proven experience in:
  • Firewall and proxy migration to cloud
  • Policy migration, rule recertification, and optimization
  • Legacy to cloud-native security transformation
• Strong understanding of:
  • Migration planning and risk mitigation
  • Rollback and fallback strategies

Service Delivery

• Experience in IT services / managed services environments
• Familiarity with ITIL processes (change, incident, problem management)
• Experience working with regulated banking/financial clients
• Experience supporting audits and regulatory reviews

Preferred Qualifications

• Certifications:
  • Palo Alto (PCNSE or equivalent)
  • CCNP Security / CCIE Security
  • Cloud certifications (AWS/Azure Security)
• Experience with automation (Python, Ansible, Terraform) is a plus

Soft Skills

• Strong stakeholder and client communication
• Ability to manage high-risk migration projects
• Problem-solving and analytical thinking
• Ability to work in multi-client, SLA-driven environments

At Zensar, we’re “experience-led everything” We are committed to conceptualizing, designing, engineering, marketing, and managing digital solutions and experiences for over 130 leading enterprises. We are a company driven by a bold purpose: Together, we shape experiences for better futures Whether for our clients, our people, or the world around us, this belief powers everything we do. At the heart of our culture is ONE with Client - a set of four core values that reflect who we are and how we work: One Zensar, Nurturing, Empowering, and Client Focus

Part of the $4.8 billion RPG Group, we’re a community of 10,000+ innovators across 30+ global locations, including Milpitas, Seattle, Princeton, Cape Town, London, Zurich, Singapore, and Mexico City. Explore Life at Zensar and join us to Grow. Own. Achieve. Learn. to be the best version of yourself.

We believe the best work happens when individuality is celebrated, growth is encouraged, and well-being is prioritized. We are an equal employment opportunity (EEO) and affirmative action employer, committed to creating an inclusive workplace. All qualified applicants will be considered without regard to race, creed, color, ancestry, religion, sex, national origin, citizenship, age, sexual orientation, gender identity, disability, marital status, family medical leave status, or protected veteran status.