Sr. Firewall Engineer (Palo Alto / Prisma Access)

RealPage, Inc.•Richardson, TX

8d•$105,800 - $180,200•Hybrid

About The Position

We are seeking a Sr. Network Security Engineer with deep expertise in Palo Alto Networks and Prisma Access (GlobalProtect). The ideal candidate will bring 5+ years of expert-level experience designing, implementing, and operating enterprise network security solutions across complex hybrid environments. This individual will have extensive experience with routing and switching integration, next-generation firewall (NGFW) architecture, cloud network security, and the full lifecycle of firewall operations, including automation, monitoring, support, optimization, and maintenance. In this role, you will architect, deploy, and support secure network solutions across RealPage's global infrastructure, including on-premises data centers, multi-cloud environments, VMware NSX platforms, and remote corporate and customer locations. You will be responsible for the daily management, monitoring, performance, and troubleshooting of critical network security systems while ensuring high availability, scalability, and operational excellence. The successful candidate will partner closely with Infrastructure, Cloud, Security, Engineering, and Operations teams to troubleshoot complex networking challenges, define future-state architectures, recommend strategic enhancements, and lead the implementation of secure, scalable network solutions that support the business today and into the future.

Requirements

5+ years of expert level experience with Palo Alto Firewalls on-prem and NGFW in cloud, including Panorama, Global Protect, and Prisma
Experience working with Github Repos and Terraform code for CI/CD deployments
5+ years of Hands-on expertise with Cisco and F5 Systems, AWS or GCP
10 years of progressive network engineering experience in enterprise and data-center environments.
In depth knowledge and experience with the implementation and support of switched and routed networks and associated protocols: SDWAN, BGP, OSPF, TCP/IP, NAT/PAT, HSRP, VRRP, STP, PBR
Ability to work as a member of a cross functional team.
Ability to document solutions with Visio, Lucidchart, Word and PowerPoint.
Must have ability to effectively communicate with clients, management, and peers.
Must possess excellent written and verbal communication skills.
Ability to work an on-call rotation

Nice To Haves

Palo Alto Engineering and Deployment experience
Akamai CDN Edge, WAF Experiemce working in the UI and Troubleshooting issues from clients
Hands on experience with AWS and Google Cloud architectures
Experience with Load Balancers
Network automation tools such as ansible or python
Application stack layer 3-7
Positive attitude with a love of learning new tech.

Responsibilities

Manage and act as subject matter expert (SME) for our Palo Alto Firewalls and management platform – focus on improvements and automation
Engineer solutions utilizing Cisco, F5 and AWS or GCP stack.
Configure, monitor, and troubleshoot network platform
Perform in depth application assessments and document changes required to on board APP into RealPage Systems
Determine operational weaknesses within the existing network infrastructure and present execution plans to overcoming those concerns in a timely fashion while still making the most cost-efficient use of resources.
Evaluate and identify opportunities to improve the security and/or performance of existing environments.
Interact with other teams to provide escalation support during outages and customer issues even if the problem might not be directly related to the network infrastructure.
Interact directly with technical and non-technical customers/vendors to resolve incidents and manage project tasks.
Work to completion all projects assigned to the engineer and exhaust all possible resources in order to provide results on time, within specifications, and on budget.
Actively monitor and react to real-time network conditions and make recommendations on improving monitoring and reporting.
Configure, monitor, and troubleshoot routing, BGP, SDWAN, IPSEC and NSX configurations
Implementation and enforcement of existing and self-designed security measures and policies to protect the RealPage and client networks from both external and internal attacks and/or abuses.
Travel may be required to meet project objectives. Approximately <5% travel.