Sr. Cybersecurity Engineer

Thank you for considering a career at Ensemble Health Partners India!

Ensemble Health Partners - The single solution for a frictionless revenue cycle with the purpose of redefining the possible in healthcare by empowering people to be the difference. Our India Office is an extension of Ensemble’s team and culture designed to augment and enhance our talent and skill base in Revenue Cycle Management in addition to our long-standing presence in technology. Leveraging our platform of services, technology, business intelligence and analytics, our teams are creating and maintaining innovative products and systems to help our revenue cycle operators achieve the most efficient, ideal outcomes for our clients. Our teams are certified in revenue cycle best practices and are supporting end-to-end RCM operations. We are at the forefront of innovation using cutting-edge technology to drive meaningful impact in the Revenue Cycle Management landscape. As a leading player in the industry, we offer an environment that fosters growth, creativity, and collaboration, where your expertise will be valued, and your contributions will make a difference.

The Opportunity:

Job Title: Senior Security Engineer (Palo Alto Network)
Experience: 7+ Years
Job Location: Hyderabad (Hybrid)

Position Summary:

We are seeking an experienced Senior Security Engineer Palo Alto Network to design, implement, and support our enterprise firewall and network security infrastructure across Palo Alto Networks Solution. The ideal candidate has 7+ years of hands-on experience managing Palo Alto Networks firewalls through Panorama and/or Strata Cloud Manager (SCM), a strong foundation in networking and core cybersecurity concepts, and excellent troubleshooting and problem-solving skills. This role is critical to maintaining the security posture, availability, and performance of our network environment, and offers a clear growth path toward Senior Security Engineer or Senior Network Security Engineer.

Key Responsibilities

Design, configure, deploy, and maintain Palo Alto Networks next-generation firewalls (NGFWs) using Panorama and/or Strata Cloud Manager (SCM).
Develop, review, and optimize firewall security policies, NAT rules, App-ID/User-ID/Content-ID configurations, and security profiles.
Manage firewall rule base hygiene, including periodic rule reviews, cleanup of unused/overly permissive rules, and change control documentation.
Monitor firewall health, performance, and log data (via Panorama, SCM, or SIEM integration) to proactively identify anomalies and security incidents.
Troubleshoot complex network and security issues across LAN, WAN, VPN (site-to-site and remote access), and cloud connectivity (Prisma Access/SASE).
Support firewall upgrades, patching, HA pair configuration/failover testing, and disaster recovery planning.
Collaborate with network, security operations, and infrastructure teams on architecture design, segmentation strategy, and Zero Trust initiatives.
Participate in incident response activities, providing firewall log analysis and containment actions as needed.
Participate in an On-Call rotation to support P1/P2 firewall and network security incidents outside of business hours.
Maintain accurate documentation of network diagrams, firewall configurations, standard operating procedures (SOPs), and change records.
Ensure compliance with internal security policies and relevant regulatory/industry frameworks (e.g., HIPAA, NIST, PCI-DSS as applicable).
Evaluate new Palo Alto features/releases and recommend adoption where it improves security posture or operational efficiency.
Provide Tier 2/3 escalation support and mentor junior team members on firewall and networking best practices.

Required Qualifications:

7+ years of hands-on experience administering Palo Alto Networks firewalls via Panorama and/or Strata Cloud Manager (SCM).
Strong foundational networking knowledge: TCP/IP, routing (static/OSPF/BGP), switching, VLANs, DNS, DHCP, and network segmentation concepts.
Proven experience configuring security zones, security/NAT policies, App-ID, User-ID, SSL decryption, and threat prevention profiles.
Experience with VPN technologies (IPSec site-to-site, Global Protect remote access).
Strong analytical, troubleshooting, and problem-solving skills; able to diagnose and resolve complex network/security issues under pressure.
Solid understanding of network security best practices, including least-privilege access and defense-in-depth principles.
Ability to work both independently and collaboratively across cross-functional IT and security teams.
Experience with Prisma Access / SASE and cloud-delivered security architecture.
Basic working knowledge of core security engineering and cybersecurity concepts (e.g., defense-in-depth, CIA triad, common attack techniques, vulnerability and patch management, and security frameworks such as NIST).
Excellent written and verbal communication skills, including the ability to translate technical risk into business terms for non-technical stakeholders and remain composed under pressure during incident response.

Preferred Certifications (Plus):

PCNSE (Palo Alto Networks Certified Network Security Engineer) - strongly preferred and reflects the expected depth of expertise at this experience level.
PCNSA (Palo Alto Networks Certified Network Security Administrator) - acceptable as a baseline if PCNSE is still in progress.
CCNA (Cisco Certified Network Associate) or equivalent networking certification.
CompTIA Security+ (or ISC2 Certified in Cybersecurity) - a basic cybersecurity certification demonstrating foundational security knowledge.
Additional relevant certifications: PCCSE (Prisma Cloud), PCSAE, or CompTIA Network+ are a plus.

Preferred / Nice-to-Have Experience:

Experience working in a healthcare organization or other highly regulated industry, with familiarity with HIPAA and PHI-handling requirements.
Exposure to automation/scripting (PowerShell, Python, Terraform, or Ansible) for firewall policy management or reporting.
Experience in integrating firewall logs with SIEM platforms (e.g., Logscale, Splunk, Sentinel, QRadar) for correlation and alerting.
Familiarity with cloud networking security in Azure, AWS, or GCP.
Understanding of Zero Trust Network Access (ZTNA) principles and micro-segmentation.

Why Choose Ensemble India?

People First, Last + Always

We believe in putting people at the heart of everything. Our culture is rooted in collaboration, growth and innovation—where your contributions are valued, your voice is heard and your potential is nurtured.

A Place to Thrive

Whether you're just starting out or looking to grow your career, Ensemble India is a place where you can do your best work and be your best self. We offer structured career paths, paid professional certifications, tuition reimbursement and mentorship opportunities to help you advance.

Comprehensive Total Rewards

We support the physical, emotional and financial well-being of you and your family. Our Total Rewards package include:

• Healthcare coverage for associates and their immediate families including parents

• Paid time off plans

• Retirement benefits

• Recognition and wellness programs

• Market competitive pay rates

Inclusive Culture

Our organization is deeply committed to fostering a positive environment and culture where we celebrate and reward merit and contribution and where every associate feels valued, included, and empowered to succeed.

Purpose-Driven Impact

We proudly partner with local communities through philanthropic initiatives—from school supply drives to health awareness campaigns—because giving back is part of who we are.

Ensemble Health Partners is an equal employment opportunity employer. It is our policy not to discriminate against any applicant or employee based on race, color, sex, sexual orientation, gender, gender identity, religion, national origin, age, disability, military or veteran status, genetic information or any other basis protected by applicable federal, state, or local laws. Ensemble Health Partners also prohibits harassment of applicants or employees based on any of these protected categories.