Network Security Engineer

What You ll Do:

• Configure firewall policies.
• Configure interfaces and routing on firewalls.
• Configure next-gen features e.g., URL filter, IPS etc.
• Configuration migrations from SonicWall, CheckPoint, ASA/FTD etc
• Perform Best Practice Assessment and next steps to implement.
• Resolve issues through troubleshooting and inspection of infrastructure.
• Maintain complete technical documentation.
• Assist with improvements to the firewall, network performance, capacity, and scalability.
• IPSEC LAN-TO-LAN configuration and troubleshooting
• Global Protect/VPN configuration and troubleshooting.

What You ll Need:

• Panorama
• URL filtering
• IPS
• User-ID
• App-ID
• BGP and OSPF routing in PAN-OS
• Inspection of SSL encrypted traffic.
• VM-Series / Physical PA400 up to PA7500
• Expedition
• HA clustering.
• Large enterprise environment 100+ firewalls
• Packet capture analysis and troubleshooting
• Thorough understanding of TCP/IP and the OSI model
• PCNSE certification preferred.
• Global Protect / Prisma SASE
• Prisma Access / Prisma SD-WAN
• SD-WAN / IPSEC site to site

Experience:

• Panorama/PAN-OS: 5 years
• Strata Cloud Manager /Prisma Access: 3 years
• BGP and OSPF routing in PAN-OS: 5 years
• Inspection of SSL encrypted traffic: 5 years.
• Palo Alto NGFW/Panorama in a large (100+ firewalls) environment: 5 years
• Understanding of TCP/IP and the OSI model: 5 years
• Ideally (not required), experience with Palo Alto s cloud-based IoT services for NGFWs and managing NGFWs through Strata Cloud Manager.