Haystack
← Back to Jobs
Remote
Technology

Network Engineer - Palo Alto Firewall || Remote Position

Cliff Services IncUnited States🇺🇸United StatesPosted 11 Jul 2026

Why This Role Stands Out

Embrace this remote Network Engineer opportunity with Cliff Services Inc. to leverage your Palo Alto firewall expertise, where you'll contribute to critical projects and gain valuable experience. This role is perfect for a mid-senior level professional who thrives in a flexible, remote environment and is eager to make a significant impact. Apply today to explore this exciting remote position!

Quick Overview

Work Type
Remote
Level
Mid Senior

Job Description

Job Title

Network Engineer - Palo Alto Firewall

Rate

75

Location

Remote

Duration

2 months extendable

Priority

Critical
WEST COAST Candidates Preferred
Should be willing to work in HAWAII Time

Primary Skills

Access Controls, Network Engineering, Firewalls (Computer Science),Routing, Data Centers, Acceptance Testing, System Migration, Security Policies, Electrical Switches, Network Routers, Virtual Private Networks (VPN),Game Design

# Of Positions

1

Job Description

PALO ALTO Network Engineer
Work on customer engagement in Hawaii (remote) to include the following tasks:

  • Collect current-state configurations from Panorama, PA5220s edge and HA pairs, including VPN/GlobalProtect components
  • Review routing, interfaces, zones, VRs and any multi-vsys in scope
  • Confirm target PAN-OS alignment considerations with Panorama and establish migration plan and rollback approach
  • Draft cut-over plan and validation checklist per data center
  • Create LLDs documenting the target configuration on PA5520 HA pairs
  • Define GlobalProtect/VPN service continuity plan on the PA5220s and site-to-stie VPN
  • Product Acceptance Test Plan and develop detailed Methods of Procedure (MOPs) for each data center cutover in scope.
  • Build and stage target configuration
  • Migrate and consolidate configuration, validating parity with current-state behavior
  • Validate GlobalProtect and site-to-site VPN service post-cutover and confirm HA failover

Requirements

  • 5-10 years of experience implementing Palo Alto NGFW firewalls
  • Strong hands-on expertise in enterprise networking (routers, switches, firewalls) and routing protocols , and Palo Alto NGFW feature adoption and best practices
  • Experience in large-scale NGFW migrations, including developing Low Level Designs (LLDs), Acceptance Test Plans and Methods of Procedure for cutover support.
  • Experience in GlobalProtect VPN and site-to-site VPN development and migration
  • Experience developing security policies, UTM traffic rules, and access controls in NGFW
  • Experience developing application ID and custom App ID


Similar jobs