Palo Alto Network Security Specialist

As a Palo Alto Network Security Specialist, you will be responsible for designing, implementing, and operating next-gen firewall and SASE controls across enterprise and cloud networks. Your role will involve owning policy architecture, automation, and incident response in a multi-tenant, high-availability environment using PAN-OS, Panorama, Prisma Access, GlobalProtect, and integrations with SOC tooling like Cortex XDR/XSOAR or equivalents. **Key Responsibilities:** - Manage PAN-OS firewalls in HA, including policy design, NAT, VPN (IPsec/SSL), routing (BGP/OSPF), and SSL decryption. - Triage and resolve P1/P2 incidents, conduct root-cause analysis with packet captures (tcpdump/Wireshark) and threat logs. - Maintain Global Protect, Threat Prevention, URL Filtering, WildFire, DNS security, and tune & reduce false positives. - Perform backups, config drift checks, and golden-config enforcement. - Plan and execute upgrades, migrations (to Panorama/device groups), new site turn-ups, and rulebase clean-ups. - Author MOPs, run pre/post checks, and execute maintenance-window changes with safe rollback. - Drive rule recertification, maintain object naming standards, and manage tags/expirations. - Utilize Panorama APIs, Ansible/Terraform (nice-to-have) for policy-as-code, health checks, and reporting. - Integrate with SIEM/SOAR (e.g., Cortex XDR/XSOAR, Splunk) and ticketing systems (ServiceNow/Jira). **Qualifications Required:** - 4 to 8+ years of experience in network security, with at least 3 years of hands-on experience with Palo Alto (PAN-OS 9/10/11) & Panorama. - Deep knowledge of policy design, NAT/VPN, routing (BGP/OSPF), and platform features such as Threat Prevention, WildFire, and URL Filtering. - Strong troubleshooting skills using logs/pcaps and comfortable leading customer bridges during P1 incidents. - PCNSE preferred with PCNSA as a minimum requirement, along with solid TCP/IP and Linux fundamentals. **Nice To Have:** - Experience with Cortex XDR/XSOAR, DNS Security, SD-WAN basics, and exposure to Prisma Access as a secondary skill. - Proficiency in scripting/automation (Python, Ansible/Terraform), and knowledge of cloud networking (AWS/Azure). - Immediate joiners are preferred. - Competitive Salary for the right candidate. - Excellent communication and customer-facing abilities. (Note: The above job description is referenced from hirist.tech),