Palo Alto Network Engineer (w2 Only )

We are seeking an experienced Palo Alto Network Engineer to design, implement, secure, and support enterprise network environments. The engineer will manage Palo Alto firewalls, troubleshoot complex connectivity and security issues, implement security policies, and support network modernization initiatives.

Key Responsibilities

• Configure, deploy, and manage Palo Alto Networks firewalls across enterprise environments.
• Develop and maintain security policies, NAT rules, routing configurations, zones, and application controls.
• Manage firewalls centrally through Panorama.
• Implement and support GlobalProtect VPN, site-to-site VPNs, and remote-access solutions.
• Configure threat prevention, URL filtering, WildFire, antivirus, anti-spyware, and DNS security profiles.
• Perform firewall migrations from platforms such as Cisco ASA, Fortinet, Check Point, or Juniper.
• Troubleshoot routing, firewall, VPN, packet-loss, latency, and connectivity issues.
• Analyze traffic using Palo Alto logs, packet captures, session browsers, and monitoring tools.
• Support network protocols including BGP, OSPF, TCP/IP, VLANs, NAT, DNS, DHCP, and IPsec.
• Perform PAN-OS upgrades, configuration backups, high-availability testing, and disaster-recovery activities.
• Identify security risks and recommend firewall-policy improvements.
• Integrate Palo Alto platforms with SIEM, ticketing, authentication, and monitoring systems.
• Prepare network diagrams, implementation plans, change records, and operational documentation.
• Participate in change-management, incident-response, and on-call support activities.
• Work closely with cybersecurity, cloud, infrastructure, and application teams.

Required Qualifications

• 7+ years of experience in network engineering or network security.
• At least 4 years of hands-on experience with Palo Alto Networks technologies.
• Strong experience with:
• Palo Alto NGFW
• Panorama
• GlobalProtect
• Security and NAT policies
• App-ID, User-ID, and Content-ID
• High Availability configurations
• Threat Prevention and URL Filtering
• Strong understanding of routing, switching, firewalls, VPNs, and enterprise network architecture.
• Experience troubleshooting complex network and security incidents.
• Familiarity with cloud networking in AWS or Microsoft Azure.
• Knowledge of network-security best practices and zero-trust principles.
• Strong documentation, communication, and stakeholder-management skills.

Preferred Qualifications

• PCNSE certification
• CCNP Security, CCNP Enterprise, or equivalent certification
• Experience with Prisma Access, Prisma SD-WAN, or SASE solutions
• Experience with Cisco routers and switches
• Familiarity with Terraform, Ansible, Python, or firewall automation
• Experience integrating Palo Alto with Splunk, ServiceNow, Tenable, or other security platforms
• Previous experience supporting large enterprise or multi-site environments

Education

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field. Equivalent professional experience may be considered.