Firewall Engineer

Position: Senior Firewall Engineer

Experience: 7+ Years

Job Summary:

We are seeking a Senior Firewall Engineer with expertise in Palo Alto firewalls, advanced routing, and network architecture. This role will be responsible for designing, deploying, and troubleshooting firewall infrastructure, ensuring high availability, security, and compliance with best practices. The ideal candidate will have strong hands-on experience with firewall policy management, network segmentation, and security threat mitigation.

Key Responsibilities:

• Firewall Deployment & Management: Design, configure, and maintain Palo Alto firewalls
• Advanced Routing & Security Policy Enforcement: Implement and troubleshoot BGP, OSPF, VLANs, NAT, VPNs, and Zero Trust security models.
• Incident Response & Threat Mitigation: Analyze and resolve firewall security incidents, intrusion attempts, and performance issues.
• Firewall Rule Optimization & Audit: Review and optimize firewall rules, ensuring adherence to security best practices and compliance frameworks (NIST, PCI, ISO 27001).
• Network Troubleshooting & Performance Optimization: Utilize packet captures, traffic analysis, and log monitoring tools to diagnose and resolve network security issues.
• Automation & Scripting: Develop automation scripts using PowerShell, Python, or Ansible to improve firewall policy management and security monitoring.
• Security Compliance & Governance: Ensure firewall configurations meet compliance requirements and participate in internal and external audits.
• Collaboration with IT & Security Teams: Work closely with network engineers, security analysts, and IT leadership to enhance firewall security posture.
• Documentation & Reporting: Maintain detailed network security documentation, change management records, and incident reports.

Required Skills & Qualifications:

• 7+ years of experience as a Firewall Engineer .
• Expertise in Palo Alto firewalls (PAN-OS, Panorama, GlobalProtect, Threat Prevention, WildFire, etc.).
• Strong understanding of network protocols and advanced routing (BGP, OSPF, VLANs, MPLS, SD-WAN, etc.).
• Hands-on experience with VPN technologies (IPSec, SSL VPN), NAT, and access control policies.
• Advanced troubleshooting and problem-solving skills, including packet analysis and log investigation.
• Knowledge of firewall security policies, intrusion detection/prevention systems (IDS/IPS), and threat intelligence.
• Experience with automation and scripting for firewall configuration and security monitoring (PowerShell, Python, Ansible).
• Familiarity with SIEM tools, cloud security (AWS/Azure/Google Cloud Platform), and network access control (NAC) is a plus.
• Understanding of IT security compliance frameworks (NIST, PCI DSS, ISO 27001, ITIL).

Preferred Qualifications:

• Certifications such as PCNSE (Palo Alto Networks), CISSP, CCNP Security, NSE4+ (Fortinet), or equivalent.
• Experience with Next-Generation Firewalls (NGFW) and Zero Trust Security models.
• Strong documentation and communication skills for technical and non-technical audiences.