Sr Perimeter Network Engineer

Versant•New York, NY

1d•$128,000 - $156,000

About The Position

We are seeking a highly skilled Senior Perimeter Network Engineer with deep expertise in Palo Alto Networks firewalls to design, implement, manage, and optimize our perimeter security infrastructure. This role will be responsible for securing enterprise network boundaries, leading firewall architecture initiatives, and ensuring high availability, performance, and compliance across all edge security environments. The ideal candidate is a hands-on technical leader with strong experience in next-generation firewall technologies, threat prevention, and enterprise-scale network security design.

Requirements

7+ years of network engineering experience.
5+ years of hands-on experience with Palo Alto Networks firewalls.
Strong experience with Panorama.
Strong experience with GlobalProtect VPN.
Strong experience with IPSec and SSL VPNs.
Strong experience with BGP, OSPF, and routing fundamentals.
Strong experience with Network segmentation and zero-trust design.
Deep understanding of TCP/IP.
Deep understanding of NAT.
Deep understanding of VLANs.
Deep understanding of DNS/DHCP.
Deep understanding of SSL/TLS.
Experience managing high-availability firewall deployments.
Strong troubleshooting skills in complex enterprise environments.
Strong communication skills (technical and non-technical audiences).
Ability to lead technical initiatives independently.
Strong documentation and process discipline.
Analytical mindset with strong problem-solving skills.
Bachelor’s degree in Computer Science, Information Systems, or related field (or equivalent experience).

Nice To Haves

Palo Alto certifications (PCNSE preferred).
Experience with cloud firewalls (VM-Series).
Experience with Prisma Access or SASE solutions.
Automation experience (Python, Ansible, REST APIs).
Experience with SIEM integrations (Splunk, Sentinel, etc.).
Experience in large enterprise or multi-data center environments.

Responsibilities

Design, deploy, and maintain Palo Alto Networks NGFWs (physical and virtual).
Lead architecture and configuration of: Security zones and segmentation, NAT policies, Security policies, App-ID, User-ID, and Content-ID, GlobalProtect VPN.
Implement and manage Panorama for centralized firewall management.
Architect and maintain high-availability (HA) firewall clusters.
Manage multi-site and hybrid cloud perimeter environments including Azure and GCP.
Configure and optimize: IPS/IDS, URL Filtering, WildFire, DNS Security, SSL decryption.
Monitor and respond to security alerts and firewall-related incidents.
Perform firewall rule reviews, audits, and optimization.
Support vulnerability remediation and compliance initiatives.
Ensure high availability and performance of perimeter security infrastructure.
Conduct capacity planning and performance tuning.
Troubleshoot complex network and firewall issues.
Collaborate with NOC/SOC teams for incident resolution.
Maintain documentation of architecture, policies, and procedures.
Participate in security assessments and audits.
Ensure adherence to security best practices and standards.
Serve as technical SME for perimeter security.
Mentor junior engineers.
Partner with cloud, infrastructure, and security teams on new initiatives.
Lead firewall migration and upgrade projects.