Palo Alto Firewalls Engineer

Palo Alto Firewalls Engineer - Own the Edge of a Global Network

Houston, TX

You'll be the go-to engineer designing and securing a complex, always-on global network with Palo Alto at its core.

This is where traditional networking meets modern security: BGP, Cisco routing, Zscaler, SASE, cloud security, and large-scale Palo Alto deployments all in one seat.

You won't just keep the lights on. You'll lead incident response, shape security policy, and automate the tedious work away.

If you live in Panorama, think in App
- User-, and thrive in 24/7 high-availability environments, we want to talk to you.

You'll be at the center of core network security for a complex, enterprise-scale environment:

• Palo Alto Next-Generation Firewalls and Panorama
• Zscaler Internet Access (ZIA) and Private Access (ZPA)
• Enterprise BGP routing and WAN environments
• Cisco routers and switches
• Cisco Identity Services Engine (ISE)
• Security incident response and analysis
• Security automation and scripting
• Network security documentation and standards

You'll be hands-on with tools and platforms like Palo Alto NGFW, Panorama, ZIA, ZPA, Cisco ISE, and BGP in a high-availability environment.

This is the front line of securing a global network - and you own the firewall stack.

• Designing and configuring Palo Alto Next-Generation Firewalls
• Managing and optimizing Panorama for centralized firewall administration
• Implementing and monitoring Zscaler ZIA and ZPA to secure user traffic
• Configuring and enforcing security policies, including App
  - User-
• Managing complex enterprise networks leveraging BGP and WAN technologies
• Administering Cisco routers and switches for secure, high-performing connectivity
• Owning Cisco ISE for network access control and identity management
• Leading incident response and deep-dive analysis for network security events
• Designing and executing containment strategies during security incidents
• Automating routine firewall changes and security checks using scripting
• Creating and maintaining clear, comprehensive network security documentation
• Tracking security trends and driving a proactive security posture

• Proven experience managing critical network operations in a 24/7 high-availability environment
• Strong knowledge of incident response and policy management in a security operations context
• 3+ years of hands-on BGP, Cisco routing/switching, and WAN experience
• 3+ years of experience with Palo Alto firewalls and Panorama
• 3+ years managing large-scale firewall environments and deployments
• Excellent leadership and communication skills, able to work both independently and collaboratively
• Proactive, analytical mindset and commitment to continuous learning in security

You've owned large Palo Alto environments, driven firewall strategy, and aren't afraid to dive into packet-level detail when an incident hits. You're comfortable turning complex, messy networks into clean, well-documented, automated security architectures.

If you've also pushed security into Azure or AWS, tied Zscaler into a SASE framework, and used tools like Ansible, Python, or Terraform to automate repetitive work, you'll stand out fast.

This is a chance to sit at the intersection of networking and security in a global enterprise, with direct ownership of mission-critical firewalls and policies.

You'll work across multiple technologies and platforms, not siloed into a single box or tool, and have real influence on how the organization defends its network.

For an engineer who wants depth in Palo Alto and breadth across modern security (Zscaler, SASE, cloud, automation), this role checks every box.

Must be a U.S. Citizen or Lawful Permanent Resident

Must have experience supporting 24/7 high-availability network operations