Security Architect

Security Delivery Team Lead/Consultant | Full time | Experience: 5-10 years

Job No. ATCI- -S | Bengaluru | Required Skill: Web Application Firewall (WAF)

Project Role :

Security Architect

Project Role Description :

Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.

Must have skills :

Web Application Firewall (WAF)

Good to have skills :

NA

Minimum 5 year(s) of experience is required

Educational Qualification :

15 years full time education

Summary

We are seeking a technically skilled and proactive Network Security Technical Lead to manage and enhance our enterprise security infrastructure. This role focuses on securing the network perimeter through the administration of Palo Alto Firewalls, Web Application Firewalls (WAF), Bot Protection, Email Security, Endpoint Detection and Response (EDR), and IPS/IDS systems.

You will be responsible for firewall policy tuning, VPN support, DNS and IDS/IPS signature management, bot defense rule enforcement, and email threat protection. A key part of the role involves proactively identifying and addressing security gaps, ensuring compliance with internal standards, and continuous improvement through regular audits, service reporting, and cross-functional collaboration.

Roles and Responsibilities

1. Firewall Operations
   • Administer and support enterprise firewall systems, with a focus on Palo Alto platforms.
   • Perform policy tuning and propose enhancements based on incident trends and evolving threat landscapes.
   • Manage IDS/IPS signature updates, including additions, deletions, and modifications.
   • Support URL filtering configurations and enforcement.
   • Provide operational support for VPN services and troubleshoot connectivity issues.
   • Identify security gaps and recommend remediation strategies as part of continuous improvement.
   • Conduct quarterly firewall rule audits and generate compliance reports.
   • Maintain and update operational runbooks and documentation.
   • Manage patching activities for firewall infrastructure.
   • Deliver regular service performance reports and participate in incident/problem/change management processes.
   • Troubleshoot firewall configuration issues, including backup/restore and application break-fixes.
2. Bot Protection Support
   • Manage bot protection policies and rules using Cequence.
   • Configure appropriate logging levels for bot traffic analysis.
   • Perform troubleshooting and incident support related to bot activity.
   • Apply and validate standard and emergency rule requests.
   • Perform regular signature updates to maintain bot defense effectiveness.
3. DNS Security
   • Fine-tune DNS policies and implement domain-based filtering using Cloudflare.
   • Monitor and report on DNS threats weekly/monthly, including actions taken.
   • Ensure DNS configurations align with enterprise security posture and compliance requirements.

Professional & Technical Skills

Firewall Operations: Policy tuning, rule optimization, VPN support, and quarterly audit reporting using Palo Alto; incident-driven configuration backup, restore, and break-fix troubleshooting.

Threat Prevention & IDS/IPS: Signature lifecycle management (add/update/delete), URL filtering enforcement, and patch management aligned with incident trends and continuous improvement goals.

Bot Protection: Policy and rule management, logging configuration, incident triage, and signature updates using Cequence Bot Defense; validation of standard and emergency rule requests.

DNS Security: DNS policy fine-tuning, domain-based filtering, and weekly/monthly threat reporting using Cloudflare DNS.

Operational Excellence: Service reporting, runbook maintenance, and change/problem/incident management across firewall and bot/DNS security layers.

Tools & Platforms: Palo Alto, Cequence (Bot Defense), Cloudflare (DNS).

Must-Have Skills:

• Strong hands-on experience with Palo Alto firewalls and associated security features.
• Proficiency with Cequence for Bot protection and Cloudflare for DNS security.
• Solid understanding of network security principles, VPNs, IDS/IPS, and URL filtering.
• Familiarity with ITIL-based incidents, problems, and change management processes.
• Ability to analyze logs and traffic patterns to identify anomalies and optimize rules.
• Experience with patch management, service reporting, and compliance audits.
• Strong documentation skills and attention to detail.

Good-to-Have Skills:

• Exposure to cloud-based firewall deployments and hybrid network environments.
• Experience in automation or scripting for firewall operations and reporting.
• Familiarity with Service Now ITSM Tool

15 years full time education

Equal Employment Opportunity Statement

All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law.

We work with one shared purpose: to deliver on the promise of technology and human ingenuity. Every day, more than 775,000 of us help our stakeholders continuously reinvent. Together, we drive positive change and deliver value to our clients, partners, shareholders, communities, and each other.

We believe that delivering value requires innovation, and innovation thrives in an inclusive and diverse environment. We actively foster a workplace free from bias, where everyone feels a sense of belonging and is respected and empowered to do their best work.

At Accenture, we see well-being holistically, supporting our people’s physical, mental, and financial health. We also provide opportunities to keep skills relevant through certifications, learning, and diverse work experiences. We’re proud to be consistently recognized as one of the World’s Best Workplaces.

We have been alerted to the existence of fraudulent messages asking job seekers to set up