Palo Alto Firewall Engineer

Global Staffing & Talent Solutions•New Berlin, NY

1d•Remote

About The Position

ECLARO is looking for a Palo Alto Firewall Engineer for our client in New Berlin, CT. The client is a leading technology solutions provider, collaborating with customers to manage their needs and achieve success in their business goals. This is a part-time remote engineering support role for a production network environment, averaging approximately 25 hours per week. It is a highly hands-on role focused on making configuration changes and updates to physical Palo Alto firewall appliances. The position requires flexibility for occasional weekend and after-hours maintenance windows. The ideal candidate is a strong Palo Alto engineer who can independently execute approved changes, troubleshoot issues, validate configurations, and document work with minimal supervision. This is a hands-on role, not simply a security architect position, requiring comfort with firewall configuration, production changes, validation, troubleshooting, and documentation.

Requirements

3+ years of hands-on network security/firewall engineering experience.
Strong production experience with Palo Alto Networks firewalls.
Experience making configuration changes directly on physical Palo Alto appliances.
Strong knowledge of PAN-OS, security policies, NAT, routing, zones and interfaces.
Experience with IPsec/GlobalProtect VPNs and troubleshooting.
Strong understanding of TCP/IP, routing, switching and network security.
Experience with firewall upgrades, maintenance and configuration management.
Ability to work independently and execute changes accurately with minimal supervision.
Strong troubleshooting and problem-solving skills.
Willingness to support occasional weekend and after-hours maintenance windows.
Palo Alto: PAN-OS, PA-Series firewalls, Panorama, HA
Security: Security Policies, NAT, App-ID, User-ID, URL Filtering, SSL Decryption
Networking: TCP/IP, BGP, OSPF, VLANs, routing, segmentation
VPN: GlobalProtect, IPsec, SSL VPN
Operations: Change Management, maintenance windows, configuration backup/restore, logging and monitoring

Nice To Haves

PCNSE or Palo Alto Networks certification.
Experience with Palo Alto Panorama.
Experience supporting HA firewall pairs and failover environments.
Experience with BGP, OSPF and advanced routing.
Experience with GlobalProtect.
Experience with network segmentation and Zero Trust security architectures.
Experience working in large enterprise environments.
Familiarity with ITIL/change-management processes.

Responsibilities

Perform hands-on configuration changes and updates on physical Palo Alto Networks firewalls.
Implement approved firewall policy, NAT, routing, VPN and security configuration changes.
Manage and modify security policies, NAT policies, objects, zones and interfaces.
Support firewall upgrades, configuration changes, maintenance and hardware-related activities.
Validate firewall changes and confirm connectivity and security functionality following implementation.
Troubleshoot firewall, routing, VPN and connectivity issues.
Review existing configurations and recommend appropriate improvements or remediation.
Maintain accurate firewall configurations, diagrams, change records and technical documentation.
Follow established change-management, maintenance-window and rollback procedures.
Coordinate with network, security and infrastructure teams during planned changes.
Participate in occasional after-hours and weekend maintenance windows when required.
Respond to production issues and provide timely troubleshooting support.
Ensure changes follow security standards and established operational procedures.