Senior Firewall Engineer (Palo Alto)

Required Skills & Experience

Required Qualifications 5+ years of firewall engineering experience Strong experience with enterprise firewall platforms such as Palo Alto, Fortinet, Check Point, Cisco Firepower, Juniper SRX, or similar technologies Firewall rule creation and policy management VPN administration and troubleshooting IPSec tunnel configuration and support Network routing experience SSL/TLS and encryption troubleshooting Ability to perform advanced Tier 2/Tier 3 network security troubleshooting Experience owning critical infrastructure and operating independently

Nice to Have Skills & Experience

Prisma Access experience. Palo Alto Cloud Firewall experience Strata Cloud Manager AWS Cloud GlobalProtect administration PKI (Public Key Infrastructure) experience Palo Alto certifications (PCNSA, PCNSE) Experience implementing Zero Trust frameworks Experience leading security infrastructure projects

Job Description

Our client is seeking a Senior NGFW Engineer to serve as the primary owner of their enterprise firewall environment. This individual will lead firewall administration, security policy management, VPN connectivity, IPSec tunnel implementation, routing changes, and advanced network security troubleshooting across both on-premises and cloud environments. This is a hands-on engineering role with significant ownership and an opportunity to lead future security infrastructure projects. Responsibilities include configuring and troubleshooting firewall policies, validating website access requests, managing VPN connectivity, building and supporting IPSec tunnels, implementing routing changes, and resolving complex network security issues. The engineer will leverage Strata Cloud Manager as the primary management platform and support cloud-based firewall deployments with auto-scaling capabilities. This individual will also help support Zero Trust initiatives, partner with Cybersecurity and Infrastructure teams on security best practices, assist with incident response, and participate in future security infrastructure projects and technology implementations.