Palo Alto SME (Senior Network Security Engineer) | | San Jose, CA

Job Title

Palo Alto SME (Senior Network Security Engineer) – Four Ways Consulting, San Jose, CA. Full‑time, onsite.

Four Ways Consulting seeks an experienced Palo Alto SME to lead critical firewall and VPN modernization initiatives for a high‑impact security environment in San Jose. The role is central to designing and enforcing Zero Trust, least‑privilege access models while strengthening the enterprise network security posture.

As a Senior Network Security Engineer, you will serve as the subject‑matter expert for Palo Alto Networks technologies, driving strategy, design, and implementation across firewall and remote access platforms. You will lead traffic discovery efforts, modernize VPN architectures using Global Protect, and implement identity‑ and role‑based access controls aligned with Zero Trust principles. The role requires close collaboration with security, network, and identity teams to ensure policies are scalable, robust, and compliant.

This hands‑on onsite role is ideal for a security professional who thrives in complex, enterprise‑grade environments.

• Lead firewall architecture, design, and modernization initiatives using Palo Alto Networks platforms.
• Design, implement, and optimize VPN and remote access solutions with Global Protect.
• Perform traffic discovery and application analysis to support Zero Trust security models.
• Develop and enforce least‑privilege access policies based on identity, role, and context.
• Collaborate with cross‑functional teams to align network security with business and compliance requirements.
• Provide expert‑level troubleshooting and guidance on complex network security issues.

• Extensive hands‑on experience with Palo Alto firewalls in enterprise environments.
• Strong expertise in Global Protect VPN design and implementation.
• Proven experience designing identity‑based or role‑based network access policies.
• Deep understanding of Zero Trust security architecture and principles.
• Senior‑level background in network security engineering.
• U.S. Citizenship (mandatory).
• Ability to work onsite in San Jose, CA.

• Palo Alto certifications (PCNSE, PCCSE, or equivalent).
• Experience integrating Palo Alto with enterprise IAM solutions.
• Knowledge of cloud‑delivered security models or SASE concepts.
• Experience with large‑scale enterprise or highly regulated environments.