Firewall & Network Security Engineer

Primary Responsibilities 

• Administer and support Palo Alto PA-1420, PA-460, and PA-450 firewalls. 

• Administer and maintain Palo Alto Panorama including device groups, templates, policies, and log management. 

• Design, deploy, configure, and validate new Palo Alto firewall clusters and High Availability (HA) pairs. 

• Lead firewall refresh, migration, cutover, and implementation projects. 

• Configure and maintain security policies, NAT, VPNs, routing, zones, and security profiles. 

• Perform troubleshooting, upgrades, health monitoring, and performance tuning. 

• Conduct Best Practice Assessments (BPA), rule reviews, and security optimization activities. 

• Support Threat Prevention, WildFire, DNS Security, SSL Decryption, App-ID, and User-ID initiatives. 

• Participate in CAB and change management processes; develop implementation and rollback plans. 

• Maintain technical documentation, diagrams, standards, and operational procedures. 

• SOC analysis and support experience is preferred but not required. 

Required Qualifications 

• 5+ years of enterprise firewall administration experience. 

• 5+ years of Palo Alto Networks experience. 

• Hands-on experience with Panorama. 

• Strong knowledge of TCP/IP, VLANs, BGP, OSPF, NAT, DNS, VPNs, and network security. 

• Experience supporting and troubleshooting HA deployments. 

• Strong customer-facing communication skills. 

Preferred Qualifications 

• PCNSA or PCNSE certification. 

• Security+, CISSP, or CCNP Security. 

• Experience supporting managed security services. 

• Experience with SIEM, EDR, security automation, or Agentic SOC technologies. 

• Threat hunting and incident response experience preferred.