Palo Alto Firewall Engineer
Cloud Destinations LLC
Dice Job Match Score™
🔢 Crunching numbers...
Job Details
Skills
- Palo Alto Networks
- Tufin Preferred
Summary
- Review existing firewall rule sets to identify overly permissive, redundant, unused, misconfigured, or undocumented access.
- Execute remediation activities, including rule cleanup and removal, rule modification and tightening of access, and consolidation and optimization of rule sets.
- Recommend and implement improvements to firewall rule structure and organization.
- Participate in potential top-to-bottom rule set redesign where appropriate.
- Ensure alignment with security best practices and internal standards.
- Implement approved firewall changes in accordance with change control processes.
- Validate changes after implementation to confirm that security objectives are achieved without unintended service disruption.
- Partner with security, networking, and application owners to understand application requirements and validate rule necessity and impact.
- Provide technical input into the prioritization of remediation efforts.
- Support development of a remediation backlog, including a firewall rule burn-down list.
- Provide updates on rules remediated, the complexity of remaining work, and risks or blockers.
- Maintain technical documentation of changes made.
- Strong hands-on experience with Palo Alto Networks firewall technologies, including rule administration and policy analysis.
- Deep understanding of network security principles, firewall rule design, and network segmentation.
- Experience performing firewall audits, rule cleanup, and optimization initiatives.
- Ability to work independently in a high-volume remediation environment.
- Strong analytical skills to assess rule risk and impact before change execution.
- Firewall Platforms: Palo Alto Networks is required, including hands-on rule administration and policy analysis. Familiarity with Cisco ASA or Firepower, Check Point, or Fortinet is a plus.
- Firewall Policy and Change Automation: Tufin experience is highly preferred, including policy orchestration, rule lifecycle management, risk and impact analysis, and automated rule cleanup workflows. Familiarity with AlgoSec or Skybox is a plus.
- Network Security Fundamentals: Transmission Control Protocol/Internet Protocol (TCP/IP), routing and switching, Network Address Translation (NAT), virtual private networks (IPSec/SSL), network segmentation, zoning, and demilitarized zone (DMZ) architecture.
- Change Management and Documentation: Experience with IT service management (ITSM) and change control platforms, such as BMC Remedy, and network documentation tools.
- Scripting and Automation, a plus: Python or Bash for rule analysis, reporting, or bulk remediation tasks.
- Compliance and Frameworks: Familiarity with the Payment Card Industry Data Security Standard (PCI DSS), the National Institute of Standards and Technology (NIST) frameworks, or similar audit and compliance frameworks relevant to firewall governance.
- Tufin
- Dice Id: 91097117
- Position Id: 9100378
- Posted 2 hours ago
Company Info
One of the leading US-based staffing and IT consulting partner. Experience exceptional service and top-tier talent across industries. Count on us for staffing solutions that cater to the unique demands of the American market.
Our experienced recruiters ensure a seamless fit within your team, accelerating success. But we go beyond staffing and empower employees with fully sponsored certification programs, keeping them ahead. Experience comprehensive benefits including health, wellness coverage, dental insurance, vision insurance, as well as flexible hours, remote work options, and a robust 401K plan to ensure a secure future at the companies we represent.
At Cloud Destinations, we bring industry expertise and a passion for excellence. From Enterprise Cloud Strategy to Managed Infrastructure Services, Digital Transformation, BI & Data Analytics, Security, Data Engineering, and more, we navigate the IT landscape with finesse. Choose us as your trusted partner, witness transformative talent and exceptional service. Let's unlock new possibilities and drive your success in the dynamic world of IT together.
Never miss an opportunity! Create an alert based on the job you applied for.Similar Jobs
It looks like there aren't any Similar Jobs for this job yet.
Search all similar jobs