Senior Network Security Engineer

Job Title:

Location:

Employment Type:

Experience:

About the Role:

Palo Alto Firewall Security Engineer

Key Responsibilities:

• Design, configure, and manage

  Palo Alto firewalls (5450, 460, VM-Series)

  in large-scale, high-availability environments.
• Administer and maintain

  Palo Alto Panorama

  for centralized policy management, device configuration, reporting, and threat intelligence correlation.
• Implement and manage

  GlobalProtect

  for secure remote access, zero-trust network access (ZTNA), and endpoint protection.
• Configure and enforce

  Layer 7 security controls

  , including:
• Advanced URL filtering (with category, custom, and dynamic filtering)
• Anti-spyware, anti-virus, and anti-malware policies
• Application control and content filtering
• SSL/TLS decryption and inspection
• Monitor, analyze, and tune firewall policies to reduce false positives and improve security posture.
• Collaborate with SOC teams on incident response, threat hunting, and integration with tools like

  Splunk, Sentinel, CrowdStrike, and FireEye

  .
• Develop and maintain security policies aligned with

  ISO 27001, SOC 2, GDPR, HIPAA

  , and other compliance frameworks.
• Participate in automation initiatives (e.g., using REST APIs, Python, or Swimlane) to streamline firewall workflows and reduce manual effort.

Required Skills & Experience:

• 6+ years of hands-on experience with

  Palo Alto firewalls

  , including deployment and management of

  5450, 460, and VM-Series

  appliances.
• Proven experience with

  Palo Alto Panorama

  for centralized management, policy distribution, and reporting.
• In-depth knowledge of

  GlobalProtect

  (including gateway, client, and authentication integration).
• Expertise in

  Layer 7 security

  features: URL filtering, anti-spyware, application control, content filtering, and SSL decryption.
• Strong understanding of network security principles, firewall rule optimization, and threat mitigation.
• Experience working in

  24x7 SOC environments

  with incident response and compliance reporting.
• Familiarity with cybersecurity tools in the stack:

  Splunk, Sentinel, CrowdStrike, FireEye, ServiceNow, Qualys, Zscaler, and Swimlane

  .
• Certifications such as

  PCNSA, PCNSE, or PCPP

  are highly preferred.