Next Generation Firewall

Next Generation Firewall Engineer Jobs

18 jobs found

1d ago

Senior Network Security Engineer

Govcio LLC Remote 🇺🇸 Remote

Remote

1d ago

$120k - $140k/yr Full time Senior Firewall Globalprotect

Apply Now

Job Description

GovCIO LLC is seeking a Senior Network & Security Engineer to lead the design, operation, troubleshooting, and continuous improvement of enterprise network-security infrastructure. This is a fully remote role within the United States focused on Palo Alto NGFW and Panorama, High Availability, and Cisco switching and telemetry integration.

Key Responsibilities

Lead the design, deployment, administration, and lifecycle management of Palo Alto Networks NGFW environments running PAN-OS.
Own centralized firewall management through Palo Alto Panorama, including device groups, templates, template stacks, policy inheritance, upgrades, configuration backups, log monitoring, and firewall onboarding.
Design and govern security policies using zero-trust, least-privilege, application-aware, and risk-based principles.
Configure and troubleshoot security zones, NAT, virtual routers, static and dynamic routing, IPsec VPN, GlobalProtect, decryption, URL Filtering, Threat Prevention, WildFire, DNS Security, and App-ID policies.
Lead enterprise network segmentation and microsegmentation using security zones, VLANs, subinterfaces, virtual routers, routing controls, and application-based security policies.
Develop secure controls for traffic between users, servers, applications, management networks, guest networks, IoT/OT devices, data-center workloads, and cloud resources.
Architect, configure, test, and troubleshoot Palo Alto High Availability deployments, including Active/Passive and Active/Active designs as required.
Resolve complex HA failures related to HA1 control links, HA2 session/state synchronization, HA3 packet forwarding, peer communications, configuration synchronization, monitoring failures, split-brain prevention, and failover recovery.
Plan and execute HA failover testing, PAN-OS upgrades, disaster-recovery exercises, and maintenance procedures with minimal service impact.
Troubleshoot HA infrastructure dependencies, including cables, transceivers, switch ports, port channels, VLANs, routing, MTU, latency, packet loss, and redundant-path failures.
Lead configuration, support, and troubleshooting of Cisco Catalyst and Nexus switching environments.
Design and support VLANs, trunking, STP/RSTP/MST, EtherChannel/port channels, HSRP/VRRP, Layer 2/Layer 3 switching, ACLs, QoS, switch security, routing, and access-control technologies.
Diagnose complex connectivity and performance issues using firewall logs, session inspection, packet captures, CLI diagnostics, switch counters, flow data, and network-monitoring platforms.
Analyze TCP/IP behavior including handshake failures, SYN/SYN-ACK/ACK flows, retransmissions, resets, timeouts, asymmetric routing, MTU/MSS issues, fragmentation, latency, packet loss, and NAT translation problems.
Verify packet flow across firewall policy, App-ID, routing, NAT, decryption, threat prevention, VPN, switching, and server/application layers.
Monitor firewall management-plane and dataplane health, including CPU, memory, session capacity, packet buffers, throughput, logging, and interface performance.
Integrate Palo Alto NGFWs and Panorama with Strata Logging Service and Cortex XSIAM.
Ensure reliable firewall log forwarding, cloud logging, log ingestion, data normalization, event availability, retention, and telemetry quality.
Use Cortex XSIAM and XQL Search to investigate, correlate, and respond to firewall, endpoint, identity, cloud, and third-party security events.
Partner with SOC teams to tune detections, investigate alerts, develop response procedures, improve visibility, and support incident containment and remediation.
Lead root-cause analysis for major network or security incidents and deliver corrective and preventive action plans.
Develop and maintain network diagrams, firewall-policy documentation, HA designs, runbooks, change plans, architecture standards, and operational procedures.
Mentor junior engineers and provide technical leadership during projects, production incidents, and security reviews.

Qualifications

Bachelor’s degree with 8+ years experience (or commensurate experience).
7+ years of progressive experience in network engineering, network security, firewall administration, or security infrastructure operations.
5+ years of hands-on Palo Alto Networks firewall experience in a production enterprise environment.
Advanced operational experience with Palo Alto Panorama, including multi-device policy management, templates, device groups, upgrades, configuration management, and troubleshooting.
Strong hands-on experience designing, maintaining, and troubleshooting Palo Alto High Availability environments.
Advanced understanding of HA1, HA2, HA3, configuration synchronization, session synchronization, failover behavior, link monitoring, path monitoring, peer health, and recovery processes.
Strong expertise in TCP/IP, IPv4/IPv6, DNS, DHCP, ARP, routing, NAT, VPNs, and packet-level troubleshooting.
Demonstrated ability to investigate TCP handshakes, resets, retransmissions, MTU/MSS issues, asymmetric routing, connection timeouts, and firewall session behavior.
Extensive experience with Cisco Catalyst and/or Cisco Nexus switching technologies.
Strong knowledge of enterprise switching and routing, including VLANs, trunking, STP/RSTP/MST, EtherChannel, HSRP/VRRP, routing protocols, ACLs, QoS, and switch-security controls.
Proven experience designing or implementing network segmentation and microsegmentation solutions.
Working knowledge of Cortex XSIAM, Strata Logging Service, security-event correlation, alert investigation, XQL Search, and firewall log ingestion.
Ability to lead technical design discussions, manage complex workstreams independently, and communicate risks and recommendations to technical and nontechnical stakeholders.
Strong documentation, change-management, incident-management, and root-cause-analysis skills.
Must be able to attain and maintain AOUSC Public Trust.

Technology Focus

Palo Alto Networks NGFW, PAN-OS, Palo Alto Panorama
Cortex XSIAM, Cortex XQL Search, Strata Logging Service
Cisco Catalyst, Cisco Nexus
IPsec VPN, GlobalProtect, URL Filtering, Threat Prevention, WildFire, DNS Security, App-ID
High Availability (Active/Passive and Active/Active)
TCP/IP, NAT
STP/RSTP/MST, EtherChannel/port channels, HSRP/VRRP, VLANs

Role Overview

Located within the United States with a fully remote arrangement.
Responsible for Palo Alto Networks next-generation firewalls, Panorama, High Availability, Cisco switching, network segmentation, Cortex XSIAM, and Strata Logging Service.

Preferred Skills

Master’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field.
Palo Alto Networks certifications: PCNSA, PCNSE, PCCSE, or equivalent enterprise-level experience.
Cisco certifications: CCNP Enterprise, CCNP Security, CCIE Enterprise Infrastructure, CCIE Security, or comparable expertise.
Experience with Palo Alto Prisma Access, Prisma Cloud, Cortex XDR, Cortex XSOAR, or cloud-delivered security services.
Experience with Cortex XSIAM alert triage, XQL queries, data-source integrations, detection tuning, dashboards, reporting, and response automation.
Experience with Cisco ISE, Cisco ACI, SD-Access, or enterprise network-access-control solutions.
Familiarity with Fortinet Security Fabric, FortiGate, FortiManager, and FortiAnalyzer.
Experience with AWS, Azure, Google Cloud Platform, hybrid-cloud network design, and cloud-security controls.
Familiarity with SIEM, SOAR, EDR/XDR, vulnerability-management, NDR, network-monitoring, and ticketing platforms.
Automation skills using Python, Ansible, Terraform, REST APIs, or related infrastructure-as-code and orchestration tools.
Experience supporting 24x7 environments, participating in an on-call rotation, leading critical incidents, and executing emergency changes.

Location and Compensation

Remote (remote) within the United States. Salary range: USD 120,000 - 140,000 per yearly (USD $120,000.00 - USD $140,000.00 /Yr.).

View full job page →

1mo ago

Network Security Engineer

WCC Technologies Group Chino, CA

Chino, CA

1mo ago Closed

$65 - $80/hr Full time Cisco Cloud Security Cloud Security Architecture

This position is no longer accepting applications (closed Sep 12, 2026).

Job Description

WCC Technologies Group is seeking a Network Security Engineer with 5 to 10 years of hands-on experience to support security initiatives across both pre-sales and post-sales consulting engagements. This onsite role in Chino, CA focuses on advising customers and delivering advanced firewall, SD-WAN, and SASE solutions, with responsibility for design, deployment, troubleshooting, and customer-facing incident escalation.

What you’ll do

Assist the sales team during pre-sales engagements by advising customers on security requirements, recommending best-fit technologies, and designing firewall, SD-WAN, and SASE solutions.
Design, configure, and deploy next-generation firewalls and secure network architectures using Palo Alto Networks (PAN-OS, Panorama), Fortinet (FortiGate, FortiManager), Cisco, and other leading platforms.
Architect and implement SD-WAN and SASE capabilities, including ZTNA, SWG, CASB, and cloud-delivered security services such as Prisma Access, Cisco Umbrella, and Fortinet SASE.
Join customer discovery calls and RFP reviews to support requirements gathering, and help build Bills of Materials (BoMs) for firewall, SD-WAN, and SASE projects.
Configure and troubleshoot advanced routing and switching environments, including BGP, OSPF, VLANs, and enterprise WAN/LAN architectures.
Implement site-to-site and remote access VPNs, including IPsec/GRE tunnels, and support Zero Trust access policies across hybrid and multi-cloud environments.
Conduct security policy audits, optimize firewall rules, and support vulnerability remediation to strengthen customer security postures.
Support post-sales delivery through staging, configuration, validation, on-site installation, and assistance during network cutovers.
Produce and maintain customer-facing technical documentation, including network diagrams, firewall rule sets, configuration standards, and implementation runbooks.
Act as a client-facing technical resource, mentor junior engineers, and escalate or resolve complex customer security incidents when required.
Build and maintain network automation workflows and monitoring integrations using Ansible, n8n, Python, and platforms such as Zabbix or PRTG to improve visibility and reduce manual effort.

Requirements

5-10 years of hands-on experience in enterprise network security engineering, ideally in a consulting or MSP environment.
Relevant certifications strongly preferred: PCNSE, Fortinet NSE 4-7, CCNP (Enterprise or Security), or CCIE.
Working knowledge of cloud networking constructs across AWS, Azure, or GCP (for example: VPC/VNet peering, Transit Gateway, ExpressRoute).
Comfort working with IPAM/DCIM tools (for example: NetBox) and ITSM/ticketing platforms (for example: ServiceNow, Jira).
Strong communication and presentation skills, including the ability to explain technical concepts to technical and executive stakeholders.
Ability to handle multiple concurrent client engagements and shifting priorities in a fast-paced consulting environment.
Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent practical experience.

Technologies

Palo Alto Networks (PAN-OS, Panorama), Fortinet (FortiGate, FortiManager), Cisco
SD-WAN, SASE, ZTNA, SWG, CASB (Prisma Access, Cisco Umbrella, Fortinet SASE)
BGP, OSPF, VLANs
IPsec, GRE, Zero Trust
Ansible, n8n, Python
Zabbix, PRTG, NetBox
ServiceNow, Jira
AWS, Azure, GCP, VPC/VNet peering, Transit Gateway, ExpressRoute
IPAM, DCIM, ITSM

Pay and location

Location: Chino, CA (onsite, in person)
Pay: USD 65.00 - 80.00 per hour

View full job page →

1mo ago

Senior Network Security Engineer

International SOS Government Services San Antonio, TX

San Antonio, TX

1mo ago Closed

$115k - $140k/yr Full time Senior Azure Azure Government

This position is no longer accepting applications (closed Aug 30, 2026).

Job Description

International SOS Government Services is seeking a Senior Network Security Engineer to secure, design, operate, and sustain the IT network and security infrastructure for a key government contract. The role spans both Azure based and on premises networks and requires onsite work in San Antonio, Texas. This position focuses on robustly protecting and optimizing the network environment to support critical government operations.

Responsibilities

Maintain network hardware and systems across Azure and on premises Cisco infrastructure.
Identify, diagnose, and remediate significant network and hardware issues through research, analysis, fault isolation, and resolution.
Evaluate current and future systems to inform improvements and planning.
Monitor the intrusion prevention system for signs of network intrusions and respond to incidents.
Keep the intrusion prevention system and its signatures current and effective.
Design on prem or Azure Government Cloud networks in line with project requirements and architectural principles.
Develop and track key network metrics for IT reviews, reporting, and ongoing monitoring.
Implement VPN configurations, firewall rules, and web filtering updates.
Upgrade network hardware and software, including Cisco switches, Checkpoint firewalls, and F5 load balancers.

Requirements

Experience with Cisco Nexus and Catalyst switches.
Experience with Checkpoint firewalls and intrusion prevention.
Experience with F5 load balancers.
Microsoft Azure Networking expertise, including virtual networks, routing, subnets, ExpressRoute, VPN, and Network Security Groups.
Strong understanding of networking protocols and concepts such as routing, VLANs, subnetting, load balancing, TCP/IP, DNS, HTTP, TLS, and SSH.
Scripting experience is a plus (PowerShell, Python, Bash, or similar).
Goal and results oriented.
Strong analytical and problem solving abilities.
Self-starter with the ability to manage multiple competing demands.
Comfortable with ambiguity and changing priorities.
5+ years designing, building, and operating networks.
5+ years with Checkpoint security.
5+ years in Cisco networking.
10+ years in information technology.
Bachelor's degree in Information Technology, Information Security, or equivalent (or 4 additional years of network security engineering experience).
Cisco Certified Network Associate (CCNA) certification.
Azure Network Engineer Associate certification preferred.
U.S. citizen able to obtain Tier 3 / Level II IT Security Clearance after offer and maintain clearance.
English language proficiency; any second language is preferred.
On-call and after-hours support as needed.

Technologies

Cisco Nexus
Cisco Catalyst switches
Checkpoint firewalls
Intrusion prevention systems
F5 load balancers
Microsoft Azure Networking
Virtual networks, routing, subnets, ExpressRoute, VPN, Network Security Groups
Azure Government Cloud
PowerShell, Python, Bash or similar scripting

Travel / Rotation

Not Required
On-call / after-hours support required as needed

Salary

USD 115,000 - 140,000 per year

Location

San Antonio, TX (onsite)

View full job page →

1mo ago

Senior Cybersecurity Engineer

eTeam Inc Columbus, OH

Columbus, OH

1mo ago Closed

$60 - $67/hr Contract Senior Application Security Cloud Platforms

This position is no longer accepting applications (closed Aug 28, 2026).

Job Description

What we offer

eTeam Inc presents a hybrid Columbus, Ohio based Senior Cybersecurity Engineer role. This contract position offers a competitive hourly rate of $60-$67, a 12 month term, and a temp-to-hire pathway. You will join an enterprise security team focused on web application and network protection, working to secure internet facing applications through Web Application Firewall, API security, bot protection, and robust network defense technologies.

Role details

Role: Senior Cybersecurity Engineer

Location: Columbus, OH (Hybrid)

Employment Type: Contract with Temp-to-Hire option

Duration: 12 Months

Compensation: USD 60 - 67 per hour

Responsibilities

Design, configure, deploy, and support the F5 Distributed Cloud XC WAF platform.
Manage WAF policies, signatures, and security controls.
Deploy and oversee API protection measures.
Deploy and oversee Bot Defense capabilities.
Implement and manage DDoS mitigation strategies.
Manage Geolocation policies.
Manage rate limiting configurations.
Develop and manage Custom WAF Challenges.
Tune WAF policies to reduce false positives.
Support onboarding of applications into WAF services.
Conduct policy reviews and ongoing optimization.
Participate in incident response involving web application attacks.
Protect enterprise applications against OWASP Top 10 vulnerabilities, injections, credential stuffing, clickjacking, XSS, and CSRF.
Review architectures and recommend security improvements.
Collaborate with application development teams during onboarding and troubleshooting.
Support and manage Palo Alto Networks NGFWs.
Implement network segmentation and Site-to-Site and Remote Access VPNs.
Manage firewall rules and network security policies.
Execute security implementations and network troubleshooting.
Respond to security incidents and participate in on-call rotations.
Monitor and report on enterprise security posture.
Automate repetitive operational security tasks where possible.
Engage in Incident Response, Threat Hunting, Security Assessments, and Vulnerability Remediation.
Perform Root Cause Analysis and Security Architecture Reviews.

Requirements

Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field, or equivalent experience.
5+ years of Cybersecurity or Network Security experience.
3+ years of hands-on Web Application Firewall experience.

Technologies

F5 Distributed Cloud (XC) WAF
Palo Alto Networks NGFW and Palo Alto Networks Firewalls
HTTP/HTTPS, TLS/SSL
REST APIs
DNS, Load Balancing, VPN Technologies
WAF Policy Management, API Protection, Bot Defense, DDoS Protection
Vulnerability Management

View full job page →

1mo ago

Cisco Network Security Engineer/ Senior Consultant

Deloitte Morristown, NJ

Morristown, NJ

1mo ago Closed

$105k - $208k/yr Full time Cisco Cisco Identity Services Engine Cloud Platforms

This position is no longer accepting applications (closed Aug 21, 2026).

Job Description

This onsite Cisco network security engineering role sits within Deloitte's Cyber practice in Morristown, New Jersey. The position targets professionals with at least 3 years of experience and a BA/BS in a technical field, offering a salary range of USD 105,400 to 207,800 per year.

Responsibilities

Designing, deploying, and administering Cisco FTD and FMC across enterprise ecosystems, covering physical, virtual, and cloud-based deployments.
Implementing and maintaining Cisco ISE capabilities, including 802.1X network access control, device profiling, guest lifecycle management, TrustSec segmentation, and integration with directory stores.
Configuring and tuning advanced security features such as IPS, malware protection, URL filtering, DNS-based security, Security Intelligence, and SSL/TLS decryption policies.
Deploying and integrating Cisco Secure Firewall offerings in cloud environments like AWS, Azure, and Google Cloud, with centralized policy management and secure connectivity across hybrid infrastructures.
Developing client facing security architectures, integrating Cisco platforms with SIEM tools and automation solutions, and delivering recommendations that align technical requirements, compliance needs, and business objectives.

Requirements

Experience designing, evaluating, and troubleshooting enterprise network security using Cisco technologies.
Implementation and management of Cisco FTD, FMC, and ISE solutions.
Support for 802.1X network access control, device profiling, guest access, TrustSec segmentation, and policy enforcement.
Ability to analyze and tune firewall, IPS, SSL/TLS decryption, and threat prevention controls.
Experience deploying secure network and firewall solutions across on-premises, campus, data center, and cloud environments.
Ability to produce technical assessments, target-state architectures, implementation roadmaps, and executive-ready deliverables.
Proven capacity to lead projects or workstreams.
Ability to manage and prioritize multiple tasks in fast-paced environments.
Ability to provide clear guidance to others.

Technologies

Cisco Firepower Threat Defense (FTD), Cisco Firepower Management Center (FMC), Cisco Identity Services Engine (ISE)
Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP)
REST APIs, Ansible, Terraform, Python
Cisco Catalyst Center, Cisco Secure Access, Cisco Umbrella, Cisco Secure Client, Duo Security, Cisco SecureX
SSL/TLS decryption, TrustSec, 802.1X Network Access Control, SIEM, Security Intelligence

The Team

Our Enterprise Security offering embeds security within digital transformation initiatives by protecting the client's technical backbone while enabling secure progress. The practice covers security architecture, secure development and deployment, end-to-end cyber cloud capabilities, application security, and security for emerging technologies and connected products.

View full job page →

1mo ago

Cisco Network Security Engineer/ Senior Consultant

Deloitte Dallas, TX

Dallas, TX

1mo ago Closed

$105k - $208k/yr Full time Cisco Cisco Identity Services Engine Cloud

This position is no longer accepting applications (closed Aug 20, 2026).

Job Description

Deloitte's Cyber practice is seeking a Senior Consultant who specializes in Cisco network security engineering to design, deploy, and manage security infrastructure across enterprise, cloud, and hybrid environments. This onsite role in Dallas, TX focuses on Cisco security platforms such as Firepower and ISE, delivering secure connectivity and policy enforcement for complex client ecosystems. The position offers a yearly salary range of USD 105,400 - 207,800 and requires a BA/BS in a technical field with a minimum of three years of experience.

Responsibilities

Design, deploy, and manage Cisco Firepower Threat Defense (FTD) and Firepower Management Center (FMC) across physical, virtual, and cloud deployments within enterprise environments.
Implement and support Cisco Identity Services Engine (ISE) capabilities, including 802.1X network access control, device profiling, guest lifecycle management, TrustSec segmentation, and integration with enterprise identity stores.
Configure and optimize advanced security features such as IPS, malware protection, URL filtering, DNS-based security, Security Intelligence, and SSL/TLS decryption policies.
Deploy and integrate Cisco Secure Firewall solutions in cloud platforms (AWS, Azure, GCP) with centralized policy management and secure connectivity across hybrid infrastructures.
Develop client-facing security architectures that integrate Cisco platforms with SIEM and automation tools, delivering recommendations aligned with technical, compliance, and business objectives.

Requirements

Ability to design, assess, and troubleshoot enterprise network security environments using Cisco security technologies.
Experience implementing and managing Cisco FTD, FMC, and ISE solutions.
Capability to support 802.1X NAC, device profiling, guest access, TrustSec segmentation, and policy enforcement.
Skill in analyzing and tuning firewall, IPS, SSL/TLS decryption, and threat prevention controls.
Experience supporting secure network and firewall deployments across on-premises, campus, data center, and cloud environments.
Ability to produce technical assessments, target-state architectures, implementation roadmaps, and executive-ready deliverables.
Proven ability to lead projects or workstreams and manage multiple tasks in fast-paced settings.
Strong communication skills with the ability to provide clear guidance to teams and stakeholders.

Technologies

Cisco Firepower Threat Defense (FTD)
Firepower Management Center (FMC)
Cisco Identity Services Engine (ISE)
802.1X Network Access Control
TrustSec
Intrusion Prevention System (IPS)
SSL/TLS decryption
URL filtering
DNS-based security
Security Intelligence
Cisco Secure Firewall
AWS, Microsoft Azure, Google Cloud Platform (GCP)
SIEM
REST APIs
Ansible, Terraform
Python
Cisco Secure Access, Cisco Umbrella, Cisco Secure Client
Duo Security, Cisco SecureX
Cisco Catalyst Center, Software-Defined Access (SD-Access)

Benefits

Discretionary annual incentive program

View full job page →

1mo ago

Cyber Palo Alto Networks Security Engineer/ Senior Consultant, Strategy, Growth, and Transformation

Deloitte Costa Mesa, CA

Costa Mesa, CA

1mo ago Closed

$105k - $208k/yr Full time Cloud Platforms Consultant Consulting

This position is no longer accepting applications (closed Aug 20, 2026).

Job Description

This Senior Consultant role sits within Deloitte's Cyber Enterprise Security practice, focusing on modernizing network defense using Palo Alto Networks technologies across on premises and cloud environments, including NGFW, Prisma Access, and SIEM/SOAR integrations. The position is onsite in Costa Mesa, CA, with a salary range of USD 105,400 to 207,800 per year.

Responsibilities

Design, deploy, and operate Palo Alto Networks Next-Generation Firewalls across on premises and cloud environments, including AWS, Azure, and Google Cloud Platform.
Implement and optimize Prisma Access components such as GlobalProtect, Prisma Agent, and Prisma Browser to support secure internet access and remote work scenarios.
Administer Panorama and Strata Cloud Manager to enable centralized policy management, device configuration, visibility, and consistency across enterprise deployments.
Configure and tune security capabilities including Threat Prevention, IPS/IDS, Anti-Spyware, Antivirus, WildFire, DNS Security, and SSL/TLS decryption policies.
Develop client solution designs and recommendations, integrating Palo Alto platforms with SIEM/SOAR and identity provider tools, and enabling automation through Terraform, Ansible, or Python.

Requirements

BA/BS degree in a technical field (e.g., Computer Science, Cyber Security, Information Technology, or equivalent work experience).
PCNSE (Palo Alto Networks Certified Network Security Engineer) certification.
5+ years of progressive network security engineering experience with demonstrated depth in Palo Alto Networks technologies and increasing levels of technical ownership and leadership.
5+ years hands-on experience designing, deploying, and managing Palo Alto Networks NGFW in on premises and cloud environments (AWS, Azure, and/or GCP).
3+ years designing, deploying, and managing Prisma Access, including configuration of GlobalProtect, Prisma Agent, and Prisma Browser for Internet and secure remote access use cases.
3+ years designing, deploying, and managing Panorama centralized management, and Strata Cloud Manager.
3+ years configuring and tuning Palo Alto Threat Prevention features, including IPS/IDS, Anti-Spyware, Antivirus, WildFire, and DNS Security.
3+ years implementing and troubleshooting SSL/TLS Decryption policies, including forward proxy and inbound inspection, certificate management, and decryption exclusion handling.
3+ years hands-on experience defining, managing, and reviewing security policies, including rule base optimization, policy lifecycle management, and periodic access reviews.
3+ years of experience with one or more major cloud service providers (AWS, GCP, Azure) and their native security toolsets, including deployment of VM-Series firewalls within cloud-native architectures.
Ability to travel up to 50 percent on average, based on client work and industries served.
Limited immigration sponsorship may be available.

Technologies

Palo Alto Networks NGFW, AWS, Microsoft Azure, Google Cloud Platform (GCP)
Prisma Access, GlobalProtect, Prisma Agent, Prisma Browser
Panorama, Strata Cloud Manager
Threat Prevention, IPS, IDS, Anti-Spyware, Antivirus, WildFire, DNS Security
SSL/TLS decryption, Terraform, Ansible, Python
VM-Series, SIEM, SOAR, Zscaler, Netskope, Okta, Azure AD, Ping Identity, Palo Alto Cloud Identity Engine (CIE), SAML, SCIM

Benefits

Discretionary annual incentive program

The Team

Our Enterprise Security offering embeds security across digital transformation by protecting a client’s technical backbone while enabling secure innovation. The practice spans security architecture, secure development and deployment, end-to-end cyber cloud capabilities, application security, and security for emerging technologies and connected products.