Firewall Engineer

Job Summary:

We are looking for a highly skilled Palo Alto Firewall Engineer to design, implement, maintain, and optimize network security infrastructure. The candidate should have hands-on experience with Palo Alto Next-Generation Firewalls (NGFW), Panorama, URL filtering, Global Protect VPN, and Threat Prevention features to protect and enhance enterprise network security.

Key Responsibilities:

• Design, deploy, and manage Palo Alto Firewalls (physical and virtual appliances).
• Configure and manage security policies, NAT, application control, and threat prevention profiles.
• Implement and support Global Protect VPN and IPSec/SSL tunnels.
• Maintain and manage Panorama for centralized firewall administration.
• Monitor logs and alerts, investigate incidents, and troubleshoot firewall-related issues.
• Perform firewall rule reviews, clean-ups, and optimizations for performance and compliance.
• Integrate with SIEM tools, Identity, and multi-factor authentication systems.
• Manage URL filtering, WildFire, DNS security, and SSL decryption policies.
• Ensure proper zone-based security architecture and least privilege access across the network.
• Plan and execute firmware upgrades, high-availability (HA) setups, and DR testing.
• Create and maintain network security documentation, including policies, procedures, and diagrams.
• Collaborate with SOC, NOC, and compliance teams to align with regulatory and security standards (e.g., ISO, PCI-DSS).

Required Skills & Qualifications:

• Bachelors degree in Computer Science, Information Security, or related field.
• 5+ years of hands-on experience with Palo Alto NGFWs.
• Strong experience with:
• Palo Alto Firewalls (PA-3K/5K/7K or VM-Series)
• Panorama for centralized policy management
• App-ID, User-ID, Content-ID
• SSL Decryption and WildFire
• Global Protect VPN and IPsec tunnels
• In-depth understanding of network protocols (TCP/IP, BGP, OSPF, VLANs, NAT, HRSP, DNS).
• Experience in high availability, failover, and load balancing designs.
• Proficiency in log analysis and packet captures (using tools like Wireshark).

Preferred Certifications:

• PCNSA (Palo Alto Networks Certified Network Security Administrator)
• PCNSE (Palo Alto Networks Certified Network Security Engineer)
• CCNA & CCNP