Job Type: Full Time

Job Category: IT

Job Description

Job Title: Network - Palo Alto Firewall Engineer

Location: Sunnyvale, CA

Full Time

Job Description

We are looking for an experienced Network Palo Alto Firewall Engineer to design, implement, configure, and support enterprise network security infrastructure. The ideal candidate will have strong hands-on experience with Palo Alto Networks firewalls, PAN-OS, Panorama, network routing, VPN, security policies, and troubleshooting.

Palo Alto Networks NGFWs provide application-, user-, and content-based visibility and control through technologies such as App-ID, User-ID, and Content-ID.

Must-Have Technical Skills

• Strong hands-on experience with Palo Alto Networks Next-Generation Firewalls
• Expert knowledge of PAN-OS and Palo Alto firewall architecture
• Experience with Panorama for centralized firewall management
• Strong understanding of Security Policies, NAT, ACLs, Zones, Virtual Routers, and interfaces
• Experience with App-ID, User-ID, Content-ID, URL Filtering, Threat Prevention, and WildFire
• Hands-on experience with SSL Decryption / TLS inspection
• Experience configuring and troubleshooting IPSec VPN, GlobalProtect, and site-to-site VPNs
• Strong knowledge of TCP/IP, DNS, DHCP, VLANs, subnetting, and network security
• Experience with routing protocols including BGP, OSPF, and static routing
• Experience with HA Active/Passive and Active/Active configurations
• Knowledge of QoS, GRE tunnels, NAT, and network segmentation
• Strong troubleshooting skills using firewall logs, packet captures, and monitoring tools
• Experience with firewall upgrades, migrations, configuration backups, and disaster recovery
• Knowledge of enterprise network security and Zero Trust principles

Palo Alto's current PAN-OS networking capabilities include interfaces, zones, VLANs, virtual routers, IPSec/GRE tunnels, DHCP, DNS, QoS, and dynamic routing such as OSPF and BGP.

Roles & Responsibilities

• Design, deploy, configure, and maintain Palo Alto firewall infrastructure.
• Configure and manage firewall security policies, NAT policies, routing, zones, and interfaces.
• Manage Palo Alto firewalls through Panorama and perform centralized configuration changes.
• Configure and troubleshoot GlobalProtect, IPSec VPN, SSL decryption, and remote-access solutions.
• Implement firewall policies based on applications, users, devices, and security requirements.
• Monitor firewall health, traffic patterns, security events, and performance.
• Troubleshoot network connectivity, application access, routing, and firewall policy issues.
• Perform firewall upgrades, patches, migrations, and configuration reviews.
• Implement and maintain High Availability configurations.
• Analyze traffic and security logs and perform packet-level troubleshooting when required.
• Work with network, security, cloud, and infrastructure teams to resolve complex issues.
• Develop and maintain network security documentation, diagrams, and operational procedures.
• Participate in security assessments, incident response, and infrastructure improvement initiatives.
• Support enterprise network segmentation and Zero Trust security initiatives.

Preferred Skills

• Palo Alto Networks certifications such as PCNSA, PCNSE, or PCCET
• Experience with Cisco, Juniper, or Arista networking
• Knowledge of AWS/Azure cloud networking and cloud firewalls
• Experience with Prisma Access / Prisma Cloud
• Knowledge of automation using Python, Ansible, REST APIs, or Terraform
• Experience with network monitoring and SIEM tools such as Splunk
• Strong communication, documentation, and problem-solving skills.

Required Skills