Firewall Administrator

Required Technical Experience

• At least 3 years of direct, hands-on administration of Palo Alto firewalls (3K and 5K series) managed by Panorama.
• Building and maintaining Security and NAT policies
• Managing HA firewall active/standby configurations
• Supporting HA pairs with multiple virtual firewalls
• Strong CLI usage for troubleshooting and performance data collection
• Performing PAN-OS upgrades on HA firewalls and HA Panorama management consoles (minimum two upgrade cycles completed)
• Administering and troubleshooting:
• IPSEC VPN tunnels to WAN and third-party vendors
• Mixed-vendor environments (including Cisco and Cradlepoint devices)
• Working knowledge of BGP for VPN tunnel configuration
• Experience with Palo Alto dedicated log collectors
• Use of firewall templates and template stacks in Panorama
• User-n with Active Directory and RADIUS
• Multi-factor authentication implementation with Azure
• SSL certificate implementation and lifecycle use on Palo Alto firewalls
• External Dynamic List configuration and management
• Using firewall logs to inform and automate policy decisions
• Effective use of TAG objects beyond rule documentation/identification
• Experience working directly with Palo Alto Support to resolve platform issues

• Layer 2 and 3 network experience preferred