Senior Network Security Engineer
- E-Solutions Inc.
1 Days Ago
NA
W2
Seabrook Beach-NH
6-10 Years
Required Skills: GlobalProtect, Prisma SASE, Prisma SD-WAN, Palo Alto's cloud-based IoT services
Job Description
Position Overview
Seeking an experienced Senior Network Security Engineer specializing in Palo Alto Networks technologies to join its project-focused engineering team. This role will be responsible for the design, deployment, configuration, migration, troubleshooting, and assessment of Palo Alto next-generation firewall and Prisma Access environments.
The ideal candidate must have hands-on implementation and deployment experience with Palo Alto—not someone whose experience is limited to monitoring or maintaining existing firewalls.
This engineer will work directly with external customers, internal engineering teams, and project stakeholders, so strong communication, customer-facing, and interpersonal skills are essential.
Key Responsibilities
Palo Alto Design & Implementation
- Design, deploy, configure, and troubleshoot Palo Alto Networks NGFW solutions.
- Perform conversion and configuration of firewall security policies.
- Work with locally managed, SCM-managed, and Panorama-managed firewalls.
- Design and configure Layer 3 networking for NGFW and Prisma Access.
- Configure interfaces, routing, tunnels, and remote-access solutions.
- Design and configure Palo Alto security profiles.
- Perform firewall migrations, policy conversions, and implementation activities.
- Troubleshoot complex Palo Alto NGFW and Prisma Access environments.
- Conduct assessments of existing NGFW and Prisma Access infrastructure.
- Create detailed technical documentation for customer environments and implementations.
Routing & Network Security
- Configure and troubleshoot BGP and OSPF within PAN-OS.
- Configure static routing and Layer 3 interfaces.
- Implement GRE and IPSec tunnels.
- Configure site-to-site IPSec VPN solutions.
- Work with GlobalProtect and Prisma SASE technologies.
- Support Prisma Access and Prisma SD-WAN environments.
- Perform packet capture analysis and network troubleshooting.
- Analyze and troubleshoot TCP/IP communication and network traffic.
Palo Alto Security Features
Hands-on experience with:
- Panorama / PAN-OS
- Strata Cloud Manager
- Prisma Access
- GlobalProtect
- Prisma SASE
- Prisma SD-WAN
- App-ID
- User-ID
- URL Filtering
- Intrusion Prevention / IPS
- Antivirus / Anti-Spyware
- DNS Security
- Vulnerability Protection
- Data Filtering
- SSL/TLS encrypted traffic inspection
- Tenant restrictions and header insertion
- High Availability (HA) clustering
Customer Engagement
- Work directly with external customers during technical discovery, design, implementation, and troubleshooting.
- Explain complex network security concepts to both technical and non-technical stakeholders.
- Participate in customer meetings and technical discussions.
- Provide recommendations based on customer requirements and security best practices.
- Work independently while collaborating effectively with internal engineering teams.
- Maintain a professional, customer-first approach throughout project engagements.
Required Qualifications
- 5+ years of hands-on Panorama/PAN-OS experience.
- 5+ years of BGP and OSPF routing experience within PAN-OS.
- 5+ years of experience with SSL/TLS encrypted traffic inspection.
- 5+ years working with Palo Alto NGFW and Panorama in large enterprise environments.
- Experience supporting environments with 100+ Palo Alto firewalls.
- 3+ years of experience with Strata Cloud Manager and/or Prisma Access.
- Strong hands-on experience with Palo Alto design, deployment, configuration, and implementation.
- Strong understanding of TCP/IP and the OSI model.
- Experience with packet capture analysis and troubleshooting.
- Experience with Palo Alto physical and virtual firewalls.
- Experience with VM-Series and PA-400 through PA-7500 series platforms.
- Experience with Panorama and Expedition.
- Strong understanding of network security and enterprise networking.
- Excellent written and verbal communication skills.
- Strong customer-facing and interpersonal skills.
- Bachelor's degree in Computer Science, Information Technology, Networking, Cybersecurity, or a related field preferred.
Preferred Qualifications
- PCNSE certification preferred.
- Experience with GlobalProtect.
- Experience with Prisma SASE.
- Experience with Prisma Access.
- Experience with Prisma SD-WAN.
- Experience with Palo Alto's cloud-based IoT services.
- Experience managing NGFWs through Strata Cloud Manager.
- Experience in large-scale enterprise Palo Alto deployments
