Palo Alto Engineer

Senior Network Security Engineer

We are seeking a Senior Network Security Engineer to provide advanced-level services focused on deploying, optimizing, and supporting Palo Alto Networks security technologies. This role involves working with next-generation firewalls and cloud-delivered security solutions. This hybrid position requires in-office presence on Tuesday, Wednesday, and Thursday and can be based in Wayne, PA;
Charlotte, NC;
Dallas, TX; or Scottsdale, AZ.

Key Responsibilities

• Provide senior-level network security services, including installing, configuring, and integrating Palo Alto NGFW and Prisma Access (SASE) solutions.
• Lead the design, implementation, and optimization of Palo Alto firewall policies, including security rules, NAT, App-, User-, and threat prevention profiles.
• Participate in advanced security architecture and policy decisions, including firewall segmentation strategies and SASE design.
• Identify and implement automation opportunities using tools like APIs, Ansible, or Terraform to improve deployment efficiency.
• Provide advanced network and security troubleshooting, including deep packet analysis and log correlation using Palo Alto tools like Panorama and Cortex Data Lake.
• Collaborate with engineering and application teams to implement secure, scalable, and reliable solutions.
• Develop and maintain documentation, including firewall rule standards, security policies, and network diagrams.
• Mentor junior engineers and support knowledge transfer on Palo Alto best practices and operations.
• Perform capacity planning, monitoring throughput, session limits, and scaling strategies for Palo Alto environments.

Required Qualifications

An undergraduate degree in a related field or an equivalent combination of experience is required. A minimum of 5 years of network or security engineering experience is necessary. Strong hands-on experience with Palo Alto Networks firewalls (NGFW) and Panorama is required. Experience with firewall migrations, rule optimization, and segmentation strategies is also needed. A working knowledge of scripting or automation (Python, Ansible, Terraform, or similar) is required.

A strong understanding of networking concepts such as routing, switching, VPNs, and TCP/IP is essential.

Preferred Qualifications

• Experience with Prisma Access (SASE) or other cloud-delivered security platforms is strongly preferred.
• Proven ability to lead projects and drive security initiatives.