Palo Alto Firewall Engineer

Join to apply for the Palo Alto Firewall Engineer role at Connecticut Judicial Branch

Join to apply for the Palo Alto Firewall Engineer role at Connecticut Judicial Branch

Get AI-powered advice on this job and more exclusive features.

This range is provided by Connecticut Judicial Branch. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

$/yr - $/yr

Direct message the job poster from Connecticut Judicial Branch

The State of Connecticut Judicial Branch is seeking a Palo Alto Firewall Engineer (Information Technology Enterprise Specialist) for the Information Technology Division, Cybersecurity Unit. The successful candidate will be tasked with designing and implementing next-generation firewall technologies, secure network design, and traffic management. The ideal candidate will have extensive hands-on experience with Palo Alto Networks firewalls, Microsoft Azure cloud computing, and enterprise network protocols, along with a passion for securing and optimizing modern IT infrastructures.

The chosen candidate will play a crucial role in shaping the future of the organization's cybersecurity strategy.

Duties include, but are not limited to:

Firewall & Security:

• Configure, deploy, and maintain Palo Alto Networks firewalls (hardware and VM series).
• Implement and optimize security policies, NAT, VPNs, threat prevention, and application-based policies.
• Conduct firewall rule audits, compliance checks, and risk assessments.
• Manage SSL decryption, URL filtering, and Wildfire-based threat intelligence.
• Monitor and analyze network traffic and logs to detect and respond to security threats.
• Troubleshoot and resolve complex firewall and connectivity issues.

Load Balancing & Traffic Management:

• Deploy, configure, and manage Citrix Net Scaler (ADC) appliances.
• Develop and maintain load balancing configurations, SSL offloading, health monitors, and traffic policies.

Microsoft Azure Cloud technologies:

• Integrate Microsoft Azure connectivity using Express Route, ensuring all cloud-bound traffic is routed through Palo Alto firewalls for full inspection, segmentation, and policy enforcement.
• Design and implement secure hybrid network architectures, isolating Azure workloads by enforcing perimeter security controls and maintaining compliance through end-to-end encrypted and monitored Express Route paths.

Qualified candidates will be proficient with
:

• Technical experience in the cybersecurity field.
• Collaborate with cross-functional teams to design and implement secure network solutions.
• Conduct firewall and network troubleshooting, performance tuning, and capacity planning.
• Stay current on emerging threats, vulnerabilities, and best practices.
• Document configurations, procedures, and troubleshooting processes.
• Ensure junior team members are properly trained, mentored, and delegated tasks to build technical expertise and maintain operational efficiency.

Qualified candidates will possess the following:

• Experience with Palo Alto firewalls (PAN-OS, Panorama).
• Experience with Citrix Net Scaler / ADC.
• Strong knowledge of TCP/IP, routing protocols (BGP, OSPF), VLANs, and network protocols.
• Proficiency in network security, firewall policies, VPNs, and SSL decryption.
• Experience in packet capture analysis and traffic flow troubleshooting.
• Familiarity with automation/scripting (Python, Bash, Ansible).
• Understanding of security frameworks (CJIS, NIST, PCI-DSS) and SIEM/IDS/IPS tools.

Preferred Qualifications
:

• Experience with cloud security (MS Azure, GCP) and infrastructure automation tools.
• Knowledge of Zero Trust Architecture and micro segmentation principles.

In addition to the preferred qualifications, the successful candidate will have a positive attitude; proficient verbal skills; a collaborative approach to working in a close team environment; willingness to assist and share knowledge with peers and subordinates; strong writing skills, submit reports, proposals, and postmortem analyses.

This position is a mix…