Palo Alto Firewall SME

Job Title: Palo Alto Firewall SME – Configuration Review & Optimization Consultant
Location: Manhattan NY – Hybrid Role and F2F interview
Duration: 12+ Months
Rate : Market

Job Description:

We are seeking a Palo Alto Firewall Subject Matter Expert (SME) to lead a comprehensive assessment and optimization of our client's internet firewall infrastructure, comprising approximately 20 firewalls. This role focuses on reviewing existing rules configurations to enhance security posture, improve performance, and ensure compliance with organizational policies.

Key Responsibilities:

• Conduct an in-depth review and analysis of the current Palo Alto firewall rules and configurations (approx. 20 firewalls).
• Identify and document inaccurate, incomplete, or irrelevant rule entries.
• Propose optimization strategies for firewall rule base, including rule cleanup, consolidation, and reordering for performance enhancement.
• Ensure firewall configurations comply with organizational security policies and industry best practices.
• Provide clear, detailed documentation of findings, proposed changes, and implementation plans.
• Collaborate with network and security teams to validate rule changes and perform testing in a non-disruptive manner.
• Assist in implementing approved rule changes and troubleshooting any resulting issues.
• Offer recommendations for maintaining optimized and compliant firewall configurations over time.

Required Qualifications:

• Proven experience with Palo Alto Networks firewall platforms and Panorama.
• Extensive hands-on experience conducting firewall configuration reviews and rule base optimization.
• Strong knowledge of network security best practices, firewall policies, and access control strategies.
• Ability to document and communicate complex configuration issues and proposed solutions effectively.
• Experience working with large-scale firewall environments in enterprise settings.
• Familiarity with compliance frameworks (e.g., NIST, ISO 27001, PCI-DSS) is a plus.
• Strong analytical and problem-solving skills.

Preferred Certifications:

• PCNSE – Palo Alto Networks Certified Network Security Engineer
• CISSP, CISM, or equivalent certifications (preferred but not required)