Palo Alto Firewall Security Consultant

Position: Palo Alto Firewall Security Consultant

Location: Remote - Some travel to PA/DE region possible
Duration: 6 months

Overview

We are seeking an experienced contractor to support our network security team in the remediation and optimization of our Palo Alto firewall environment. The ideal candidate will have deep expertise in Palo Alto firewall administration, CIS hardening practices, firewall rule analysis using Firemon, and workflow management via JIRA. This role will be embedded within our team, interfacing directly with application owners, business units, and change management to drive meaningful improvements in our firewall posture and processes.

Key Responsibilities

• Conduct comprehensive reviews and cleanups of firewall rulesets (3,000–4,000 rules), focusing on perimeter and inter-region communication.
• Analyze and remediate CIS hardening gaps identified through Tenable assessments, and implement prioritized recommendations.
• Utilize Firemon to identify, review, and optimize firewall rules, collaborating with application owners and business stakeholders for validation.
• Develop and implement best practices for firewall rule management, including naming conventions, descriptions, and lifecycle processes.
• Maintain accurate tracking and documentation of all changes and activities using JIRA, ensuring alignment with change management and review board requirements.
• Provide guidance and training to internal teams on firewall management, CIS compliance, and process improvements as needed.
• Participate in regular meetings with network and security teams, and contribute to project planning and status updates.

Required Qualifications

• 5+ years of hands-on experience managing Palo Alto firewalls in large, complex environments.
• Strong knowledge of Panorama, device templates, and advanced Palo Alto features (Wildfire, URL filtering, DLP).
• Proven track record of conducting firewall ruleset reviews and cleanups, preferably using Firemon or similar tools.
• Experience with CIS hardening benchmarks and remediation of compliance gaps.
• Proficiency in using JIRA for ticketing, workflow management, and project tracking.
• Excellent communication skills, with ability to interface effectively with technical and non-technical stakeholders.
• Strong organizational and documentation skills, with attention to detail and process improvement.
• Ability to work independently and as part of a collaborative team.

Preferred Qualifications

• Palo Alto Networks certifications (PCNSE, PCNSA, or equivalent).
• Experience in highly regulated industries (Insurance, Financial Services, etc.).
• Familiarity with other security tools and vulnerability management platforms (e.g., Tenable).
• Experience with firewall rule automation and improvement of rule review workflows.