Cloud Firewall Architect

VARITE • Downey, CA

3h • Hybrid

About The Position

VARITE is looking for a qualified Cloud Firewall Architect for one of its clients. The client is a large county government entity providing comprehensive public services. The role involves advanced knowledge and proficiency with Palo Alto Networks security platforms, Next-Generation Firewall (NGFW) technologies, cloud network security across major cloud providers (AWS, Azure, GCP, OCI), enterprise firewall technologies and migration, firewall security policy principles, routing and switching, network services and security technologies, network security monitoring and threat analysis, high-availability and fault-tolerant network security concepts, firewall software and security content management, private network interconnection technologies, and network security automation and Infrastructure as Code (IaC) concepts.

Requirements

• At least five (5) years of experience with Palo Alto Networks physical firewall appliances, VM-Series, Panorama, Device Groups, Templates, Template Stacks, and Strata Cloud Manager (SCM), or comparable.
• At least five (5) years of experience with Next-Generation Firewall (NGFW) technologies, Intrusion Prevention Systems (IPS), Application Identification (App-ID), User Identification (User-ID), URL and content filtering, and Secure Sockets Layer/Transport Layer Security (SSL/TLS) inspection, or comparable.
• At least three (3) years of experience with cloud network security technologies in Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), and Oracle Cloud Infrastructure (OCI), including third-party and native cloud security controls, or comparable.
• At least five (5) years of experience with cloud traffic inspection architectures involving AWS Gateway Load Balancer (GWLB), AWS Transit Gateway (TGW), security Virtual Private Clouds (VPCs), Azure hub-and-spoke architectures, Network Virtual Appliances (NVAs), and User-Defined Routing (UDR), or comparable.
• At least four (4) years of experience in deploying and operating cloud-based firewalls, network virtual appliances, and native security controls in one or more of AWS, Azure, GCP, or OCI.
• At least five (5) years of experience in implementing and operating hybrid connectivity with dynamic routing (BGP), including AWS Transit Gateway, Azure ExpressRoute, or equivalent private interconnects.
• Palo Alto Networks Certified Network Security Engineer (PCNSE) certification required.

Responsibilities

• Advanced knowledge and proficiency with Palo Alto Networks security platforms.
• Advanced knowledge of Next-Generation Firewall (NGFW) technologies and security concepts.
• Advanced knowledge of cloud network security technologies and architectures across Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), and Oracle Cloud Infrastructure (OCI).
• Advanced knowledge of enterprise firewall technologies and migration concepts associated with legacy platforms.
• Advanced knowledge of firewall security policy principles, access control, rule optimization, network segmentation, and security best practices.
• Advanced knowledge of routing and switching technologies.
• Strong knowledge of network services and security technologies.
• Strong knowledge of network security monitoring and threat analysis.
• Strong knowledge of high-availability and fault-tolerant network security concepts.
• Strong knowledge of firewall software and security content management.
• Working knowledge of private network interconnection technologies.
• Strong knowledge of network security automation and Infrastructure as Code (IaC) concepts.

Benefits

• Health Insurance: Medical, dental, and vision coverage
• Retirement Plans: Participation in a company-sponsored retirement savings plan.
• Legal Service Plans: Offering access to attorneys for legal advice and representation.
• employee referral bonus

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed