Palo Alto Firewall Admin SME
About The Position
The Palo Alto Firewall Admin SME supports Palo Alto firewall monitoring and troubleshooting in a Secure Access environment. The role covers security policies and App-ID, SSL decryption, URL filtering, security profiles and threat prevention, traffic and session analysis, User-ID, Panorama, GlobalProtect, NAT, policy-based forwarding, routing, interfaces and zones, and VPN/IPsec. The candidate is expected to troubleshoot tickets using sound processes and understand IAM. For Secure Access work, the candidate must also be able to troubleshoot NAT, PBF, and routing and recognize when those functions are causing an issue. This is a fully remote contract position based out of Charlotte, North Carolina. Applicants must be able to work on W-2 in the United States without sponsorship. The stated pay range is $60.00–$70.00 per hour. The position is anticipated to close on October 23, 2026.
Requirements
- Must be able to work on W-2 in the United States without sponsorship; examples listed include U.S. citizens, green card holders, and H-4 EAD holders.
- Experience with Palo Alto firewall monitoring.
- Proven expertise troubleshooting tickets, with an understanding of IAM and correct processes.
- Knowledge of source and destination NAT, policy matching, translations, and troubleshooting.
- Knowledge of policy-based forwarding behavior and how it can override the expected routing-table path.
- Knowledge of static and dynamic routing, virtual routers, route selection, next-hop troubleshooting, and asymmetric paths.
- Knowledge of Layer 3 interfaces, subinterfaces, VLANs, zones, and interface-level troubleshooting.
- Knowledge of IKE/IPsec configuration, tunnel interfaces, routing, and VPN tunnel troubleshooting.
- For Secure Access work, sufficient NAT, PBF, and routing knowledge to troubleshoot those functions and identify when they cause issues.
Nice To Haves
- Zero Trust experience, preferably with Zscaler.
Responsibilities
- Monitor Palo Alto firewalls.
- Troubleshoot security policies, App-ID rule matching and ordering, zones, objects, services, and application-default behavior.
- Configure and troubleshoot SSL forward-proxy decryption policies, profiles, certificates, exclusions, and application failures.
- Manage URL filtering categories, custom categories, policy actions, and exceptions, and troubleshoot URL-filtering issues.
- Apply and troubleshoot antivirus, anti-spyware, vulnerability protection, WildFire, and file-blocking security profiles.
- Analyze traffic and sessions using logs, session details, end reasons, policy matching, and packet captures; understand the traffic flow through a Palo Alto firewall.
- Work with User-ID mappings and identity-based security policies.
- Use Panorama for centralized policy and configuration management, commits and pushes, and managed-firewall troubleshooting.
- Support GlobalProtect portals and gateways, authentication, access policies, and client/session troubleshooting.
- Troubleshoot source and destination NAT, policy-based forwarding, routing, interfaces and zones, and VPN/IPsec tunnels.
- Troubleshoot tickets with an understanding of IAM and appropriate processes.
Benefits
- Medical insurance, if eligible.
- Dental insurance, if eligible.
- Vision insurance, if eligible.
- Critical illness, accident, and hospital coverage, if eligible.
- 401(k) retirement plan with pre-tax and Roth post-tax contributions available, if eligible.
- Voluntary life and AD&D insurance for employees and dependents, if eligible.
- Short- and long-term disability coverage, if eligible.
- Health Spending Account (HSA), if eligible.
- Transportation benefits, if eligible.
- Employee Assistance Program, if eligible.
- Time off/leave such as PTO, vacation, or sick leave, if eligible.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Career Level
Mid Level
Education Level
No Education Listed
