Azure)

InnoSoul•Columbia, SC

1d•Hybrid

About The Position

This role involves designing, deploying, and managing highly available, scalable, and secure cloud infrastructure with a focus on AWS and Azure Cloud. The engineer will be responsible for managing and deploying VM-Series Palo Alto firewalls and F5 BIG-IP LTM and ASM in Azure and AWS cloud environments. Key responsibilities include analyzing and resolving configuration issues, implementing secure (zero trust) infrastructure, and ensuring compliance with major security frameworks such as ARC-AMP (formerly known as MARS-E), NIST, HIPAA, PII, SOX, PCI, CMMC, and CUI. The position also requires experience with security for state and local government customers.

Requirements

10 YEARS' EXPERIENCE IN NETWORK SECURITY AND ENGINEERING
MINIMUM 5 YEARS HANDS-ON EXPERIENCE DESIGNING, DEPLOYING, SCALING, UPGRADING, TROUBLESHOOTING, AND OPTIMIZING PALO ALTO VM-SERIES FIREWALLS IN BOTH AWS AND AZURE CLOUD ENVIRONMENTS.
EXPERIENCE WITH PANORAMA MANAGEMENT, SECURITY POLICY DESIGN, THREAT PREVENTION TUNING, AND LOG ANALYSIS REQUIRED.
MUST DEMONSTRATE ABILITY TO ARCHITECT ZERO-TRUST CONTROLS USING PALO ALTO TECHNOLOGY.
5 YEARS' EXPERIENCE IN DEPLOYING, CONFIGURING AND MAINTAINING BIG-IP F5 LTM
COLLEGE DEGREE OR 10+ YEARS OF EQUIVALENT EXPERIENCE AS A PALO ALTO CLOUD ENGINEER
MUST HOLD PALO ALTO, AWS, OR AZURE CERTIFICATION
EXCELLENT COMMUNICATION SKILLS, BOTH WRITTEN AND VERBAL.
SELF-STARTER
EXPLICIT EXPERIENCE IN PANORAMA TEMPLATES AND DEVICE GROUPS, GLOBAL PROTECT IN CLOUD, AND HIGH AVAILABILITY VPN/TRAFFIC ROUTING ON VM-SERIES
EXPERIENCE DESIGNING AND MAINTAINING INFRASTRUCTURE IN AWS/AZURE
CLOUD SECURITY DESIGN, OPERATIONS, AND AUTOMATION EXPERIENCE
DOCUMENTATION OF SECURITY TOOLS, DEPLOYMENT CONFIGURATION, INCIDENT REPORTS, ETC.
Familiar with major security compliance frameworks and building effective monitoring, logging, and auditing of production systems to ensure compliance with mandated compliance policies (e.g., ARC-AMP (formerly known as MARS-E), NIST, HIPAA, PII, SOX, PCI, CMMC, CUI, etc.).

Nice To Haves

F5 ASM
F5 I-RULES
INFOBLOX DDI
FORESCOUT
OPSWAT METADEFENDER/ICAP
BIG-IP F5 XC
PRISMA CLOUD
CISCO UMBRELLA
PCNSA
PCNSE
SC100 – MICROSOFT CYBERSECURITY ARCHITECT
AWS CERTIFIED CLOUD SOLUTIONS ARCHITECT

Responsibilities

Design and deploy highly available, scalable, and secure cloud infrastructure with a focus on AWS and Azure Cloud.
Manage and deploy VM-Series Palo Alto firewalls in Azure and AWS cloud.
Manage and deploy F5 BIG-IP LTM and ASM in Azure and AWS cloud.
Analyze and resolve configuration issues in development, test, and production environments.
Ensure compliance with mandated compliance policies (e.g., ARC-AMP (formerly known as MARS-E), NIST, HIPAA, PII, SOX, PCI, CMMC, CUI, etc.) through effective monitoring, logging, and auditing of production systems.
Implement secure (zero trust) infrastructure in cloud.
Provide security experience with state and local government customers.
Utilize Panorama templates and device groups.
Configure Global Protect in the cloud.
Set up high availability VPN/traffic routing on VM-Series.
Design and maintain infrastructure in AWS/Azure.
Engage in cloud security design, operations, and automation.
Document security tools, deployment configurations, and incident reports.