---
title: 'Senior Infrastructure Security Engineer-L3 (Palo Alto & NGFW) at Gruve'
canonical: 'https://feeny.ai/job/senior-infrastructure-security-engineer-l3-palo-alto-ngfw-gruve-mumbai-ydgbg1gn7z9c'
type: 'job'
last_seen: '2026-09-09'
---

# Senior Infrastructure Security Engineer-L3 (Palo Alto & NGFW) at Gruve

- **Company:** Gruve
- **Location:** Mumbai, India
- **Posted:** 2026-05-25
- **Last confirmed live:** 2026-09-09
- **Apply:** https://gruve.ai/careers/?gh_jid=5228808008

## Job description

## About Gruve

Gruve is an innovative software services startup dedicated to transforming enterprises to AI powerhouses. We specialize in cybersecurity, customer experience, cloud infrastructure, and advanced technologies such as Large Language Models (LLMs). Our mission is to assist our customers in their business strategies utilizing their data to make more intelligent decisions. As a well-funded early-stage startup, Gruve offers a dynamic environment with strong customer and partner networks.

Location - Navi Mumbai, India

Position Summary

We are seeking an experienced and proactive Senior Infrastructure Security Engineer with strong expertise in Palo Alto Networks NGFW and Panorama administration. The candidate will be deployed at the client site and will serve as the primary technical point of contact for all Palo Alto-related operations and support activities. The role involves managing firewall infrastructure, leading L2 support operations, handling escalations, mentoring junior engineers, and ensuring high availability and security compliance across the client’s network environment. The ideal candidate should possess strong troubleshooting skills, client-handling experience, and the ability to work independently in a managed services environment.

## Key Responsibilities

- Lead L2/L3 support for Palo Alto Networks NGFW (PA-Series) infrastructure across the client environment.
- Manage and troubleshoot security policies, NAT rules, routing, zones, and VPN configurations.
- Monitor firewall health, traffic logs, threat prevention dashboards, and perform proactive remediation.
- Perform firmware upgrades, hotfix deployments, and HA failover testing with minimal downtime.
- Administer Panorama for centralized firewall policy and configuration management.
- Configure and manage device groups, templates, template stacks, shared objects, and log collectors in Panorama.
- Handle log collection, reporting, and forwarding profiles through Panorama.
- Act as the Single Point of Contact (SPOC) for all Palo Alto-related operational issues at the client site.
- Coordinate with Palo Alto TAC, internal support teams, and stakeholders for escalations and issue resolution.
- Mentor junior engineers and review configuration changes and operational activities.
- Manage incident, problem, and change management activities aligned with SLA requirements.
- Conduct RCA (Root Cause Analysis) and maintain operational documentation including SOPs, runbooks, and handover notes.
- Prepare MIS reports, operational dashboards, and client status reports.

Technical Skills

- Hands-on experience with Palo Alto Networks NGFW (PA-54K to PA-5K series)
- Strong expertise in PAN-OS administration and troubleshooting
- Deep understanding of Panorama administration including device groups, templates, and log collectors
- Experience with App-ID, User-ID, Content-ID, Threat Prevention, URL Filtering, and WildFire
- Knowledge of HA configurations (Active/Passive and Active/Active)
- Experience with GlobalProtect VPN, IPSec VPN, and SSL-VPN
- Good understanding of networking concepts including BGP, OSPF, VLANs, routing, and SD-WAN basics
- Familiarity with ITSM processes including Incident, Problem, and Change Management
- Experience with firmware upgrades, policy optimization, and firewall performance monitoring

## Basic Qualifications

- Bachelor’s degree in computer science, Information Technology, Engineering, or related field
- 5–8 years of hands-on experience in Palo Alto Networks support and administration
- Strong client-facing experience in managed services or consulting environments
- Excellent troubleshooting, analytical, and communication skills
- Ability to work independently at client site with minimal supervision
- Experience in stakeholder management and mentoring junior engineers
- Mandatory Certification:
- PCNSE (Palo Alto Networks Certified Network Security Engineer)
- Palo Alto Network Security Professional

## Preferred Qualifications

- PCNSA (Palo Alto Networks Certified Network Security Administrator)
- ITIL Foundation v3/v4 certification
- CCNP Security or equivalent networking certification
- Experience working in enterprise or client-site deployment environments
- Strong documentation and operational reporting skills
- Exposure to security operations and enterprise network security architecture

## Why Gruve

At Gruve, we foster a culture of innovation, collaboration, and continuous learning. We are committed to building a diverse and inclusive workplace where everyone can thrive and contribute their best work. If you’re passionate about technology and eager to make an impact, we’d love to hear from you.

Gruve is an equal opportunity employer. We welcome applicants from all backgrounds and thank all who apply; however, only those selected for an interview will be contacted.

## About Gruve

## Company Overview
- **One-liner**: Gruve provides AI-native cybersecurity, infrastructure, and data services that help enterprises deploy and secure AI at scale.
- **Entity Type**: Private (Series A, Seed stage)
- **Headquarters**: Redwood City, California, United States
- **Founded**: 2024
- **Founders**: Tarun Raisoni (CEO, Co-Founder)

## Core Business
- **Industry**: IT Services and IT Consulting; AI Security & Infrastructure
- **Target Customers**: Large enterprises (B2B), including those in regulated industries requiring private AI deployment and advanced security operations.
- **Mission / Purpose**: Enable scalable, secure, and measurable AI execution in production by delivering an AI-native approach to enterprise services.

## Products & Services
- **PulseAI**: A private AI infrastructure platform that enables enterprises to deploy generative AI on-premises, in the cloud, or in hybrid environments – production-ready in under two weeks. (SaaS/infrastructure)
- **AI SOC**: An AI-driven Security Operations Center that combines AI detection, automated investigation, and intelligent response to improve security team efficiency and reduce risk. (Managed service/SaaS)
- **Digital Forensics & Incident Response**: Structured methodologies for preserving evidence, investigating incidents, and accelerating recovery. (Service)
- **Enterprise AI Transformation Services**: Consulting and implementation services including data science, Kubernetes SRE, forward deployment engineering, and AI solution architecture. (Professional services)

## Market Standing
- **Valuation**: Not disclosed
- **Total Funding**: USD $57.5 million (across Seed and Series A rounds)
- **Key Investors**: Mayfield Fund (lead in Series A), Xora Innovation (lead in prior round)
- **Notable Acquisitions**: SecurView (July 2024), NetServ (September 2024), Lumos (October 2024)
- **Growth Signals**: 120.3% YoY employee growth (from ~134 to 413 employees); operations across 9 countries; featured in Cybersecurity Insiders on AI agent governance.

## Competitive Advantages
- **AI-Native Architecture**: Unlike legacy stacks built for static software, Gruve designs for dynamic AI workloads (probabilistic decisions, context retrieval, autonomous actions).
- **Speed to Scale**: Claims 500MW+ of distributed edge AI inference capacity and a 30% cost advantage over alternatives.
- **Integrated Security & AI**: Combines private AI infrastructure (PulseAI) with an AI-powered SOC, covering the entire lifecycle from deployment to defense.
- **Talent & Expertise**: Team draws from top firms (Cisco, IBM, Infosys) and includes deep Kubernetes, data science, and cybersecurity specialists.

## Strategic Focus
- **Private AI Deployment**: Helping enterprises keep AI workloads on their own infrastructure to maintain data ownership, governance, and security.
- **AI Security Governance**: Developing solutions to govern AI agents as a new attack surface, as highlighted in their recent thought leadership.
- **Global Expansion**: Operating in 9 countries (US, India, South Korea, UAE, Singapore, Japan, Saudi Arabia, Germany, Canada) with plans to scale further.
- **Partner Ecosystem**: Working closely with hyperscalers (noted VP of Hyperscaler Solutions) and achieving Red Hat advanced tier partner status.

## Why Work Here
- **High Growth Environment**: Headcount more than doubled in the past year, offering rapid career progression and the chance to shape a young company.
- **Culture of Trust**: Core values include giving trust from day one, constructive feedback, and a championship mindset.  
- **Global & Remote-Friendly**: Offices in 4 countries (US, India, Singapore, UAE) and remote roles posted; a distributed team with cultural diversity.
- **Learning & Impact**: Mentorship programs, opportunities to lead innovative projects in AI and security, and the ability to work on cutting-edge infrastructure.
- **Notable Perks**: Focus on career development, knowledge sharing, and a "people-first" approach.

## Sources
1. [gruve.ai – Company homepage](https://gruve.ai/)
2. [gruve.ai – About Us](https://gruve.ai/about-us/)
3. [gruve.ai – Life at Gruve](https://gruve.ai/life-at-gruve/)
4. [linkedin.com/company/gruveai – LinkedIn Company Page](https://www.linkedin.com/company/gruveai)
5. [job-boards.greenhouse.io/gruve – Careers Page](https://job-boards.greenhouse.io/gruve)

## Other roles at Gruve

- [Technical Account Manager](https://feeny.ai/job/technical-account-manager-gruve-mumbai-s7hqtbj9yy5h) — Mumbai, India
- [Network & Security Engineer](https://feeny.ai/job/network-security-engineer-gruve-dubai-xyfzv4rzh1yf) — Dubai, United Arab Emirates
- [Network & Systems Engineer (Vulnerability Management)](https://feeny.ai/job/network-systems-engineer-vulnerability-management-gruve-dubai-4c97f1fw5n7d) — Dubai, United Arab Emirates
- [Network & Systems Engineer (Vulnerability Management)](https://feeny.ai/job/network-systems-engineer-vulnerability-management-gruve-dubai-7p605zapm8fj) — Dubai, United Arab Emirates
- [Network Consultant I](https://feeny.ai/job/network-consultant-i-gruve-pune-znz1kevp3qqc) — Pune, India
- [Security Operations Consultant](https://feeny.ai/job/security-operations-consultant-gruve-pune-08z3vj5pvdre) — Pune, India
- [Network Consultant II](https://feeny.ai/job/network-consultant-ii-gruve-pune-0qzpajanq6re) — Pune, India
- [Security Analyst I](https://feeny.ai/job/security-analyst-i-gruve-pune-wa358fcfeyyy) — Pune, India
- [Security Analyst II](https://feeny.ai/job/security-analyst-ii-gruve-pune-cvt2rmyzwfy4) — Pune, India
- [Senior Security Consultant](https://feeny.ai/job/senior-security-consultant-gruve-pune-5707x1w77b40) — Pune, India