Job Description

The ideal candidate will be responsible for the design, implementation, configuration, management, and troubleshooting of our Palo Alto Networks security infrastructure. This role requires a deep understanding of network security principles, advanced threat protection, and best practices for securing enterprise networks. The engineer will play a critical role in maintaining the integrity, confidentiality, and availability of our network assets and data.

Key Responsibilities:

Design & Implementation:

+ Participate in the design and architecture of network security solutions utilizing Palo Alto Networks firewalls.
+ Implement and deploy Palo Alto Networks firewalls (physical and virtual) across various environments.

Configuration & Management:

+ Configure, manage, and optimize security policies (Security Rules, NAT, QoS, Policy Based Forwarding, etc.) on Palo Alto firewalls.
+ Administer and fine-tune advanced threat prevention features including Threat Prevention, WildFire, URL Filtering, DNS Security, and Enterprise DLP.
+ Manage VPNs (Site-to-Site, GlobalProtect VPN) for secure remote access and branch office connectivity.
+ Configure and maintain Panorama for centralized management of multiple Palo Alto firewalls.

Monitoring & Troubleshooting:

+ Monitor firewall logs and alerts for security incidents and performance issues.
+ Perform root cause analysis and troubleshoot complex network security problems related to firewall functionality, connectivity, and performance.
+ Utilize Packet Tracer, traffic logs, and other Palo Alto tools for in-depth analysis.

Security & Compliance:

+ Ensure firewall configurations adhere to industry best practices, security policies, and compliance requirements (e.g., ISO 27001, NIST, PCI DSS).
+ Conduct regular security audits and vulnerability assessments of firewall configurations.
+ Participate in incident response activities related to network security events.

Maintenance & Upgrades:

+ Perform regular maintenance, software upgrades, and patch management for Palo Alto firewalls and Panorama.
+ Develop and maintain documentation for firewall configurations, network diagrams, and operational procedures.

Collaboration & Support:

+ Collaborate with other IT teams (Network, Systems, Applications) to ensure seamless integration of security solutions.
+ Provide expert-level support and guidance to junior engineers and other teams on Palo Alto Networks technologies.

Qualifications:

Education:

Bachelor's degree in computer science, Information Technology, Cyber Security, or a related field (or equivalent practical experience).

Experience:

+ Minimum of 3-5 years of hands-on experience designing, implementing, and managing Palo Alto Networks firewalls in an enterprise environment.
+ Proven experience with Panorama for centralized management.
+ Experience with advanced security features such as WildFire, Threat Prevention, URL Filtering, and GlobalProtect.
+ Experience with network protocols (TCP/IP, BGP, OSPF), routing, and switching.

Technical Skills (Required):

+ Expertise in Palo Alto Networks Next-Generation Firewalls (NGFW).
+ Strong understanding of network security concepts (firewalls, VPNs, IDS/IPS, WAF, DLP, Zero Trust).
+ Proficiency in configuring and troubleshooting VPN technologies (IPSec, SSL VPN).
+ Familiarity with cloud security concepts (e.g., Azure, AWS, GCP) and securing cloud environments with Palo Alto.
+ Experience with scripting languages (e.g., Python) for automation is a plus.

Certifications (Preferred):

+ Palo Alto Networks Certified Network Security Engineer (PCNSE) -

Highly Preferred

+ Palo Alto Networks Certified Network Security Administrator (PCNSA)
+ Other relevant industry certifications (e.g., CompTIA Security+, CCNA Security, CCNP Security) are a plus.