Palo Alto Engineer

TEKsystems•Winston-Salem, NC

22h•$55 - $65•Hybrid

About The Position

This role involves configuring, optimizing, and troubleshooting enterprise security systems using Palo Alto Networks Next-Generation Firewalls (NGFW) and management platforms like Panorama. The engineer will be responsible for deploying firewalls, managing security policies, troubleshooting issues, and automating workflows. This includes performing firewall onboarding, template migrations, configuration imports, and policy validation for standalone and HA firewall deployments. The role also entails managed firewall lifecycle operations, such as configuration audits, commit validation, push troubleshooting, and post-migration verification. Additionally, the engineer will troubleshoot complex Panorama connectivity and synchronization issues, and develop standardized migration runbooks, operational procedures, troubleshooting documentation, and High-Level Design (HLD) documentation for enterprise firewall operations. The environment includes approximately 150 firewalls with a Panorama environment hosted in Azure.

Requirements

Paloalto
Firewall
Panorama
Next generation firewall
Working familiarity with basic coding or infrastructure-as-code tools
Firewall/intrusion detection
Experience write scripts or use tools like Python, Ansible, or Terraform to speed up deployments

Nice To Haves

PCNSE: Palo Alto Networks Certified Security Engineer
CCNP or CCIE: Cisco networking credentials

Responsibilities

Install, configure, and manage Palo Alto hardware, virtual firewalls, and cloud security tools.
Build and optimize security rules, Network Address Translation (NAT), and threat prevention profiles.
Analyze network traffic, trace connection problems, and run deep packet inspections during outages.
Automate workflows.
Keep network diagrams, security policies, and rule standards up to date.
Perform firewall onboarding, template migrations, configuration imports, and policy validation for standalone and HA firewall deployments.
Manage firewall lifecycle operations, including configuration audits, commit validation, push troubleshooting, and post-migration verification.
Troubleshoot complex Panorama connectivity and synchronization issues involving auth keys, template pushes, HA state synchronization, and log forwarding.
Develop standardized migration runbooks, operational procedures, troubleshooting documentation, and High-Level Design (HLD) documentation for enterprise firewall operations.