Network Security Engineer

Junior: $120,000–$140,000;
Senior: $160,000–$180,000.

Hybrid schedule 3 days onsite and 2 days remote

• Convert, configure, and manage firewall security policies across locally managed firewalls, Strata Cloud Manager (SCM), and Panorama.
• Design and configure Layer 3 networking for Palo Alto NGFW and Prisma Access, including interfaces, static routing, BGP, and OSPF.
• Configure and troubleshoot GRE and IPsec tunnels, site-to-site VPN connectivity, and remote-access solutions including Global Protect, clientless access, and Prisma.
• Design and configure security profiles including antivirus, anti-spyware, DNS Security, vulnerability protection, data filtering, and URL filtering.
• Implement URL filtering capabilities such as header insertion and tenant restrictions.
• Troubleshoot, assess, and document Palo Alto NGFW and Prisma Access infrastructure.
• Perform packet-capture analysis and advanced network/security troubleshooting in large enterprise environments.

• 5+ years of hands-on experience with Palo Alto Panorama and PAN-OS.
• 5+ years of BGP and OSPF routing experience within PAN-OS.
• 5+ years of experience inspecting SSL-encrypted traffic.
• 5+ years supporting Palo Alto NGFW/Panorama environments at enterprise scale, ideally 100+ firewalls.
• 3+ years of experience with Strata Cloud Manager and/or Prisma Access.
• Hands-on experience with Panorama, URL Filtering, IPS, User-, App-, HA clustering, and Expedition.
• Experience with VM-Series and physical Palo Alto platforms ranging from PA-400 through PA-7500.
• Experience with Global Protect / Prisma SASE, Prisma Access / Prisma SD-WAN, and SD-WAN / IPsec site-to-site connectivity.
• Strong understanding of TCP/IP and the OSI model, with demonstrated packet-capture analysis and troubleshooting skills.

• Experience with Palo Alto cloud-based IoT services for NGFWs.
• Experience managing NGFWs through Strata Cloud Manager.

• Bachelor's degree in a computer-related field.