Palo Alto Network Security Specialist

Palo Alto Network Security Specialist

What youll do

• Operate & support (L2/L3)

• Manage PAN-OS firewalls in

  HA

  ; policy design, NAT, VPN (

  IPsec/SSL

  ), routing (

  BGP/OSPF

  ), SSL decryption.
• Triage and resolve P1/P2 incidents; root-cause analysis with packet captures (tcpdump/Wireshark) and threat logs.
• Maintain

  GlobalProtect

  , Threat Prevention, URL Filtering,

  WildFire

  , DNS security; tune & reduce false positives.
• Perform

  backups, config drift checks

  , and golden-config enforcement.

• Deliver projects

• Plan and execute

  upgrades

  , migrations (to Panorama/device groups), new site turn-ups, and rulebase clean-ups.
• Author

  MOPs

  , run pre/post checks, and execute

  maintenance-window

  changes with safe rollback.

• Governance & hygiene

• Drive rule recertification (shadowed/unused/over-permissive rules), object naming standards, tags/expirations.

• Automation & tooling

• Use Panorama APIs /

  Ansible/Terraform

  (nice-to-have) for policy-as-code, health checks, and reporting.
• Integrate with

  SIEM/SOAR

  (e.g., Cortex XDR/XSOAR, Splunk) and ticketing (

  ServiceNow/Jira

  ).

What makes you a strong fit

• 48+ years in

  network security

  , 3+ years hands-on with

  Palo Alto (PAN-OS 9/10/11) & Panorama

  .
• Deep knowledge of policy design, NAT/VPN, routing (BGP/OSPF), and platform features (Threat Prevention, WildFire, URL Filtering).
• Strong troubleshooting with logs/pcaps; comfortable leading customer bridges during P1s.

• PCNSE

  preferred /

  PCNSA

  minimum; solid TCP/IP and Linux fundamentals.

Nice to have

• Cortex XDR/XSOAR

  , DNS Security, SD-WAN basics, Prisma Access exposure (as secondary skill only).
• Scripting/automation (Python, Ansible/Terraform), cloud networking (AWS/Azure).

Immediate joiners only

Competitive Salary for the right candidate

Excellent comms and Customer facing ability