Hybrid Cloud Firewall Architect in Downey, CA

HonorVet Technologies is a Service Disable Veteran-Owned IT staffing firm, ISO 9001, and ISO 27001 certified, working with federal agencies, state governments, and Fortune 500 enterprise clients across the US. What makes us different isn't a tagline; it's the way we work. We don't forward resumes and hope for the best. We take the time to understand where a professional like you are headed and only reach out when we genuinely believe there's a fit worth exploring.
 
Job Title: Cloud Firewall Architect
Duration: 12+ months
Location: Downey, CA, 90242
 
Job Description:
Skills Required

• Advanced knowledge and proficiency with Palo Alto Networks security platforms.
• Advanced knowledge of Next-Generation Firewall (NGFW) technologies and security concepts.
• Advanced knowledge of cloud network security technologies and architectures across Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (Google Cloud Platform), and Oracle Cloud Infrastructure (OCI).
• Advanced knowledge of enterprise firewall technologies and migration concepts associated with legacy platforms.
• Advanced knowledge of firewall security policy principles, access control, rule optimization, network segmentation, and security best practices.
• Advanced knowledge of routing and switching technologies.
• Strong knowledge of network services and security technologies.
• Strong knowledge of network security monitoring and threat analysis.
• Strong knowledge of high-availability and fault-tolerant network security concepts.
• Strong knowledge of firewall software and security content management.
• Working knowledge of private network interconnection technologies.
• Strong knowledge of network security automation and Infrastructure as Code (IaC) concepts.

 
Experience Required

• At least five (5) years of experience with Palo Alto Networks physical firewall appliances, VM-Series, Panorama, Device Groups, Templates, Template Stacks, and Strata Cloud Manager (SCM), or comparable.
• At least five (5) years of experience with Next-Generation Firewall (NGFW) technologies, Intrusion Prevention Systems (IPS), Application Identification (App-ID), User Identification (User-ID), URL and content filtering, and Secure Sockets Layer/Transport Layer Security (SSL/TLS) inspection, or comparable.
• At least three (3) years of experience with cloud network security technologies in Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (Google Cloud Platform), and Oracle Cloud Infrastructure (OCI), including third-party and native cloud security controls, or comparable.
• At least five (5) years of experience with cloud traffic inspection architectures involving AWS Gateway Load Balancer (GWLB), AWS Transit Gateway (TGW), security Virtual Private Clouds (VPCs), Azure hub-and-spoke architectures, Network Virtual Appliances (NVAs), and User-Defined Routing (UDR), or comparable.
• At least four (4) years of experience in deploying and operating cloud-based firewalls, network virtual appliances, and native security controls in one or more of AWS, Azure, Google Cloud Platform, or OCI.
• At least five (5) years of experience in implementing and operating hybrid connectivity with dynamic routing (BGP), including AWS Transit Gateway, Azure ExpressRoute, or equivalent private interconnects.

 
Education Required

• Palo Alto Networks Certified Network Security Engineer (PCNSE) certification required.