Job Summary
Key Responsibilities
DETAILED RESPONSIBILITIES
FIREWALL OPERATIONS and MANAGEMENT
- Own and manage the enterprise-grade Palo Alto Networks firewall infrastructure, including PA-Series, VM-Series, and CN-Series devices.
- Configure, implement, and maintain robust security policies, NAT rules, zones, and routing via Panorama and device-level interfaces.
- Lead advanced troubleshooting for firewall-related incidents, utilizing packet captures, flow analysis, and comprehensive log reviews.
- Administer GlobalProtect VPN, SSL decryption, URL filtering, App-ID, and User-ID policies to safeguard network access and integrity.
- Manage L3 escalations from L1/L2 teams, driving issues to timely resolution in alignment with SLAs.
SECURITY POLICY and COMPLIANCE
- Conduct regular firewall rule reviews, cleanup, and optimization to minimize the organization’s attack surface.
- Leverage AlgoSec tools (Firewall Analyzer, FireFlow) for automated policy analysis, risk assessment, and streamlined change management.
- Ensure configurations adhere to CIS benchmarks, internal security standards, and compliance frameworks such as PCI-DSS, ISO 27001, and NIST.
- Actively participate in internal and external security audits to maintain compliance and reduce risk.
CHANGE MANAGEMENT and PROJECTS
- Evaluate, implement, and test firewall rule change requests end-to-end, ensuring seamless integration and minimal disruption.
- Lead firewall migration and upgrade initiatives, including OS upgrades, hardware refreshes, and data center migrations.
- Collaborate with network, cloud, and security architecture teams on new deployments and security enhancements.
- Develop and maintain comprehensive runbooks, SOPs, and technical documentation for operational consistency.
MONITORING and INCIDENT RESPONSE
- Monitor firewall health, performance, and security events through SIEM integration and Panorama dashboards.
- Participate in an on-call rotation, responding efficiently to P1/P2 security incidents and driving rapid remediation.
- Conduct thorough root cause analysis (RCA) and post-incident reviews to prevent recurrence and strengthen defenses.
Skill Requirements
- Minimum 8 years of hands-on experience with Palo Alto Networks firewalls (NGFW, Panorama).
- Deep expertise in security policy management, zone-based architectures, and advanced traffic inspection techniques.
- Proficiency with AlgoSec Firewall Analyzer and FireFlow for policy automation and compliance.
- Strong understanding of TCP/IP, routing protocols (BGP, OSPF), VLANs, and network segmentation principles.
- Demonstrated experience with VPN technologies (IPSec, SSL/TLS, GlobalProtect).
- Familiarity with Syslog, SNMP, and SIEM platforms (e.g., Splunk, QRadar).
- Practical knowledge of ITIL-based change management processes.
EDUCATION
- Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent professional experience.
REQUIRED CERTIFICATIONS
- Palo Alto Networks Certified Network Security Engineer (PCNSE) – Mandatory
Other Requirements
- Experience with Cisco ASA/FTD, Fortinet, or Check Point firewalls.
- Knowledge of cloud security controls, such as AWS Security Groups, Azure Firewall, or equivalent.
- Familiarity with scripting or automation (Python, Ansible) for firewall policy management.
- Experience with Tufin or FireMon as alternatives/complements to AlgoSec.
- Understanding of Zero Trust Architecture principles.
- Additional certifications such as PCNSA, CCNP Security/CCIE Security, AlgoSec Certified Engineer, CompTIA Security+, CEH, or ITIL Foundation (v3/v4).