Cybersecurity Firewall Analyst II

This role will help support and evolve the organization's Secure Access Service Edge (SASE) environment, including Palo Alto Prisma Access, Global Protect, and Strata Cloud Manager, while maintaining legacy Inspection Zone technologies such as F5 BIG-IP and proxy solutions. The analyst will help drive threat prevention, policy management, cloud security controls, security monitoring, and modernization efforts across the enterprise.

• Participate in the implementation, support, and lifecycle management of Palo Alto Networks Secure Access Service Edge (SASE) solutions (Prisma Access, Global Protect, Strata Cloud Manager) within a large-scale enterprise environment, while maintaining integration with Inspection Zone technologies (F5 BIG-IP, SWG/Proxy, etc.)
• Design, deploy, and continuously optimize cloud-delivered security controls including secure web gateway (SWG), CASB, ZTNA, and threat prevention capabilities aligned to Palo Alto SASE architecture
• Provide advanced engineering support for SASE and Inspection Zone security platforms, partnering closely with Security Operations, Network Engineering, and Incident Response teams
• Drive security monitoring, telemetry integration, and policy enforcement across SASE and on-prem inspection environments to ensure consistent visibility and threat detection
• Perform system hardening, high availability design, and resilience engineering for SASE and Inspection Zone environments, including failover strategy and service continuity planning
• Maintain a strong understanding of the global threat landscape and apply Palo Alto threat intelligence and best practices to proactively reduce enterprise risk exposure
• Drive continuous improvement of detection and response capabilities, leveraging SASE telemetry to enhance incident analysis, threat hunting, and mitigation effectiveness
• Develop and report on operational and security metrics (e.g., policy effectiveness, threat prevention performance, user activity visibility) to inform leadership decision-making and improve operational maturity
• Collaborate with cross-functional teams and leadership to align SASE strategy with enterprise security architecture, modernization initiatives (e.g., legacy proxy replacement), and business objectives

• 3+ years of Cybersecurity experience (or 4+ years equivalent experience without degree)
• Experience with Palo Alto Networks SASE/Prisma Access
• Strong understanding of Security Service Edge (SWG, CASB, ZTNA)
• Networking expertise including BGP, IPSec, NAT, routing, and VPN technologies
• Experience with Global Protect
• Cloud-delivered security architecture and policy management
• Experience supporting enterprise security platforms in large environments
• Bachelor's Degree (Cybersecurity, Information Security, Computer Science, MIS, or related field) or equivalent experience
• Ability to support and optimize cybersecurity infrastructure in a 24x7 operations environment
• Must be eligible to convert to a full-time employee

* Must be currently located in Charlotte, NC*