Firewall Engineer – Palo Alto Networks

Palo Alto Firewall Engineer

Location: Hybrid – Kansas City, MO/KS candidates preferred
Duration: 12 Months, with potential extension
Experience: 10–15 Years
Preferred Work Authorization: U.S. Citizen

Job Summary

We are looking for a Junior to Mid-Level Palo Alto Firewall Engineer to support an enterprise firewall refresh and migration project. The engineer will assist with migrating Palo Alto 3200/5200 Series firewalls to 3500/5500 Series and support production cutovers, validation, and troubleshooting.

Key Responsibilities

• Perform Palo Alto firewall migrations, upgrades, and production cutovers.
• Configure and troubleshoot Palo Alto firewalls, security policies, NAT, and routing.
• Support migration from PA-3200/5200 Series to PA-3500/5500 Series.
• Perform pre- and post-migration validation and connectivity testing.
• Troubleshoot firewall and network connectivity issues.
• Follow MOPs, change-control procedures, migration plans, and rollback processes.
• Coordinate with network, security, and infrastructure teams during cutovers.

Required Skills

• Strong hands-on experience with Palo Alto Networks Firewalls.
• Experience with firewall migration, upgrade, and production cutover activities.
• Experience with Security Policies, NAT, Routing, and troubleshooting.
• Strong networking fundamentals including TCP/IP, VLANs, routing, and connectivity troubleshooting.
• Experience working in enterprise production environments.
• Panorama experience is preferred.

Key Skills

Palo Alto NGFW, PA-3200, PA-5200, PA-3500, PA-5500, Firewall Migration, Firewall Upgrade, Production Cutover, Security Policies, NAT, Routing, Panorama, Network Troubleshooting, Change Management, Migration Validation, Rollback Planning