SME - GCP Security, Palo Alto Firewall

Job Summary

We are seeking a highly skilled Network Security Engineer specializing in Palo Alto Networks Next-Generation Firewalls (NGFW). In this role, you will be responsible for the end-to-end design, deployment, configuration, and day-to-day administration of our enterprise network security infrastructure. You will leverage Palo Alto’s core security features to safeguard our perimeter, cloud environments, and remote workforce against evolving cyber threats. The ideal candidate has deep technical expertise in PAN-OS, automated policy management, and advanced threat prevention.

Key Responsibilities

Deployment & Configuration: Install, configure, and maintain Palo Alto hardware and VM-series firewalls across various deployment modes (Tap, Virtual Wire, Layer 2, and Layer 3).

Centralized Management: Administer and scale multi-firewall environments using Palo Alto Panorama for centralized policy orchestration and software updates. 

Security Feature Implementation: Configure and fine-tune advanced features including App-ID, User-ID, Content-ID, SSL Decryption, and WildFire cloud-based threat analysis.

Remote Access & Connectivity: Design, deploy, and support secure remote access via GlobalProtect VPN and establish stable Site-to-Site IPsec VPN tunnels. 

Policy Management & Auditing: Create, optimize, and clean security profiles and NAT rules. Transition traditional port-based rules to application-aware rules following the principle of least privilege.

Migration Projects: Lead or assist in migrating legacy firewall infrastructures (e.g., Cisco ASA) to Palo Alto NGFW environments using tools like Palo Alto Expedition.

Upgrades & Maintenance: Schedule and execute PAN-OS software upgrades, dynamic content updates (Antivirus, Applications, and Threats), and handle hardware replacements with zero-downtime strategies. Troubleshooting & Support: Act as the Tier-3 escalation point for complex network security issues, utilizing CLI, web UI, and packet flow analysis to isolate and resolve network anomalies. 

Skill Requirements

GCP Security, Palo Alto Firewall

Other Requirements

Network Data