Palo Alto Firewall/ Security Engineer

Palo Alto Firewall/ Security Engineer

Location: Hybrid in NYC or Malvern, PA (Local to NY/NJ/PA Only OR 1 hr drive)

Duration: 1+ years

Experience required on a resume and for submittal:

• How many years working with: Network security Engineer
• How many years working with: Palo Alto SME
• How many years working with: Certifications Requirement Notes

Seeking an experienced (10+ Years) Palo Alto Firewall Engineer to design, implement, and support enterprise network security solutions. The role focuses on managing Palo Alto firewalls, ensuring secure network architecture, and supporting modernization initiatives across on-prem and cloud environments. The ideal candidate will have strong hands-on experience with Palo Alto technologies, network security best practices, and a solid understanding of firewall policies, threat prevention, and secure connectivity.

Candidates must have long projects or positions (no hoppers) and have excellent communication skills. The client would like to see certifications and must have excellent communication skills.

Key Responsibilities:

• Design, deploy, configure, and maintain Palo Alto Networks firewalls (PAN-OS).
• Manage firewall policies, NAT rules, VPN configurations (IPSec/SSL), and security zones.
• Implement and optimize advanced security features including Threat Prevention, URL Filtering, WildFire, and GlobalProtect.
• Perform firewall rule reviews, audits, and optimization to ensure compliance and performance.
• Monitor network traffic, analyze logs, and respond to security incidents and alerts.
• Support network security architecture for cloud platforms (AWS/Azure) and hybrid environments.
• Collaborate with infrastructure, DevOps, and security teams to support secure application deployments.
• Conduct vulnerability assessments and remediation activities.
• Troubleshoot network connectivity, latency, and firewall-related issues.
• Maintain documentation for configurations, processes, and security standards.

Required Qualifications:

• 10+ years of experience in network security and firewall administration.
• Strong hands-on experience with Palo Alto firewalls and Panorama.
• Solid understanding of TCP/IP, routing, switching, and network protocols.
• Experience with VPN technologies (IPSec, SSL VPN).
• Knowledge of security frameworks and best practices (NIST, CIS, Zero Trust).
• Experience with log analysis tools and SIEM platforms.
• Familiarity with cloud networking (AWS, Azure, or GCP).
• Strong troubleshooting and analytical skills.

Preferred Certifications:

• Palo Alto Networks Certified Network Security Engineer (PCNSE)
• Palo Alto Networks Certified Network Security Administrator (PCNSA)
• AWS Certified Security Specialty (plus)
• Cisco CCNP Security or equivalent
• CompTIA Security+ or CISSP (nice to have)

Nice to Have:

• Experience with automation tools (Python, Ansible, Terraform).
• Exposure to SASE, SD-WAN, and Zero Trust architectures.
• Experience working in Agile/DevOps environments.
• Knowledge of container security (Kubernetes, Docker).

Government Careers

Show more