Security Engineer

POSITION SUMMARY
The Security Engineer designs, implements, and maintains secure network access solutions for our customer's (Palo Alto) enterprise environment.  Will work closely with network, cloud, and IT operations teams to optimize performance, troubleshoot issues, and ensure compliance with organizational security standards.

ESSENTIAL RESPONSIBILITIES

• Follow all Secur-Serv requirements, policies, procedures, and management directions
• Migrate customers from legacy firewall technologies to Palo Alto Networks platforms
• Build custom security policies and application signatures, configured for our client’s needs
• Take every opportunity to maintain proficiency and increase the level of knowledge on Palo Alto Networks SASE products, software, and services
• Provide after-hours and weekend on-call support as needed to support maintenance activities
• Analyze logs and events from the solution to perform initial troubleshooting and issue identification
• Work with our Technical Assistance Center to troubleshoot and diagnose support cases
• Maintain the Company's solution and provide mentorship on code upgrades and best practices
• Ensure client needs are met and deliverables produced on time according to specified project deliverables and scope

REQUIREMENTS

• Bachelor’s degree in Computer Science, Electrical Engineering, Computer Engineering or a related technical field or equivalent background or military experience
• Minimum 4 years’ experience in professional services
• PCNSE, CCNA, CCNP, and/or CCIE certification
• Project leadership experience - ability to drive organizations and resources to complete required tasks in service of end goals
• Detailed technical experience in the installation, configuration, and operation of high-end firewall appliances
• Strong understanding of LAN and WAN networking protocols and technologies, including switching, routing, firewalls and security solutions
• Strong TCP/IP networking skills
• Strong dynamic routing skills (BGP, OSPF, etc)
• Experience working with Remote Access VPN solutions, IPSEC, PKI & SSL, TCP/IP, Authentication Protocols (LDAP, RADIUS, SAML, etc.)
• Experience working with URL filtering
• Experience working with Proxy and SSL Decryption
• Experience working with Windows and MAC OS including (debugging, editing Windows Registries, Plist, etc.)
• Experience with one or more of these vendors: Palo Alto Networks NGFW, Cisco, Checkpoint, Juniper (Netscreen), Fortinet products, Symantec/ Blue Coat, Zscaler
• Good troubleshooting skills and ability to use tools like tcpdump & Wireshark
• Application Delivery expertise – L7 SLB / Global SLB / Traditional Link LB
• Application Performance Monitoring expertise – Response time metrics, Application identification
• Packet capture analysis / fault isolation and remediation
• In-depth knowledge and deployment experience of SD-WAN and Remote Access technologies
• Network Security expertise (IPS/IDS, ZBFW, NGFW)
• In-depth IP Routing protocol expertise (BGP, OSPF, EIGRP)
• Implementation of Legacy WAN solutions (MPLS, Leased Line, Frame Relay, Satellite, Internet VPN, ECMP, DMVPN)
• Global-scale network design
• Demonstrable Virtualization experience (VMware/Microsoft/Citrix/Linux KVM)
• Ability to work in a cross-functional environment which involves coordination with different teams such as Sales/Pre Sales/Product Management/Engineering
• Good written and verbal communication skills with confirmed ability to communicate with senior leaders and technical peers
• Desire to learn on your feet and thrive on the bleeding edge of networking.

PREFERRED SKILLS/EXPERIENCE

• Experience with Prisma Access
• Experience with public clouds like AWS/Google Cloud Platform/Azure
• Scripting and automation development experience

PHYSICAL/MENTAL REQUIREMENTS

• Sit Frequently at a desk
• Frequent fine hand and finger movements (keyboard, writing, mouse movement)
• Continual close visual acuity for reading
• Hearing and Speaking for communication within and outside of company.
• May be required to lift/push/pull up to 10 pounds for set up/movement of office equipment,
  • Mental Requirements – must be able to consistently:
    • Learn new tasks,
    • Remember Processes,
    • Maintain focus,
    • Complete tasks independently
    • Make timely decisions in the context of a workflow,
    • Ability to communicate effectively,
    • Able to adhere to process protocol in a timely manner