Job Summary
We are looking for an experienced Network Security Engineer with strong hands-on expertise in Palo Alto and Cisco firewall technologies. The ideal candidate will be responsible for firewall design, implementation, configuration, migration, and advanced troubleshooting across on-premises and Microsoft Azure environments.
The candidate should have practical experience managing enterprise firewall platforms, implementing security policies, configuring VPN connectivity, and supporting complex network security environments.
Key Responsibilities
- Configure, manage, and troubleshoot Palo Alto firewalls using PAN-OS, Panorama, and Strata Cloud Manager.
- Configure and manage Cisco Firepower Threat Defense (FTD) firewalls using Firepower Management Center (FMC).
- Implement and maintain firewall security policies, NAT, IPSec VPN, and High Availability (HA).
- Perform firewall migrations, configuration validation, cutovers, and post-migration support.
- Support cloud-hosted Palo Alto and Cisco firewall deployments within Microsoft Azure.
- Work with Azure Virtual Networks (VNet), Virtual WAN (vWAN), and User Defined Routes (UDR).
- Configure and troubleshoot BGP routing and network connectivity issues.
- Perform advanced troubleshooting of firewall and network security incidents.
- Support Prisma Access environments as required.
Required Skills & Qualifications
- Strong hands-on experience with Palo Alto firewalls and PAN-OS.
- Experience with Panorama and Strata Cloud Manager.
- Hands-on experience with Cisco FTD and Firepower Management Center (FMC).
- Strong understanding of IPSec VPN configuration and troubleshooting.
- Experience with High Availability (HA), BGP, and NAT.
- Expertise in firewall security policies and rule management.
- Experience with firewall migration and implementation activities.
- Understanding of Azure networking concepts, including VNet, vWAN, and UDR.
Preferred Skills
- Experience with Prisma Access.
- Experience supporting cloud-hosted Palo Alto and Cisco firewalls in Azure.
- Experience working in enterprise network security environments.
Work Authorization / Engagement
W2 candidates only; no 1099, no C2C, and no third-party vendor submissions.
Candidates who are currently on a transferable work authorization and are willing/eligible to transfer their visa/work authorization to the company W2 are welcome.