Palo Alto L3 Support Engineer

Job Summary

We are seeking an experienced Palo Alto L3 Support Engineer to provide advanced operational support for enterprise network security infrastructure. The ideal candidate will have strong expertise in Palo Alto Firewalls, Panorama, GlobalProtect, VPN technologies, and network troubleshooting. The role involves handling complex L3 incidents, implementing changes, performing root cause analysis, and ensuring the stability, security, and availability of enterprise network environments.

Key Responsibilities

• Provide Level 3 (L3) support for Palo Alto firewalls in production environments.
• Troubleshoot and resolve complex network security incidents and service requests.
• Configure, maintain, and optimize Palo Alto PA-Series Firewalls and Panorama.
• Manage firewall policies, NAT rules, security profiles, and VPN configurations.
• Support GlobalProtect, IPSec VPN, SSL VPN, and remote access solutions.
• Perform firewall upgrades, patches, and firmware updates with minimal downtime.
• Analyze logs and security events to identify and resolve security issues.
• Work closely with Network, Security, Cloud, and Infrastructure teams during incident resolution.
• Conduct root cause analysis (RCA) and implement preventive measures.
• Participate in change management, maintenance windows, and on-call support.
• Create and maintain technical documentation, SOPs, and knowledge base articles.
• Ensure compliance with organizational security policies and industry best practices.

Required Skills

• 5+ years of experience in Network Security.
• Strong hands-on experience with Palo Alto Networks Firewalls (PA-Series).
• Expertise in Panorama administration and centralized policy management.
• Experience with GlobalProtect, IPSec VPN, SSL VPN, NAT, and Security Policies.
• Strong knowledge of networking protocols including:
  • TCP/IP
  • BGP
  • OSPF
  • VLAN
  • Routing & Switching
• Experience with Threat Prevention, URL Filtering, WildFire, and DNS Security.
• Strong troubleshooting skills for production network environments.
• Knowledge of high availability (HA) firewall deployments.
• Experience with ITIL processes, Incident Management, Problem Management, and Change Management.

Preferred Skills

• Experience with cloud security platforms such as Prisma Access or Prisma Cloud.
• Familiarity with Cisco ASA, Fortinet, or Check Point firewalls.
• Experience with Azure, AWS, or Google Cloud Platform networking.
• Knowledge of automation using Python, PowerShell, or Ansible.
• SIEM experience (Splunk, QRadar, Microsoft Sentinel) is an advantage.

Certifications (Preferred)

• Palo Alto Networks Certified Network Security Engineer (PCNSE)
• Palo Alto Networks Certified Network Security Administrator (PCNSA)
• CCNP Security
• CCNA Security
• ITIL Foundation