Network Security Engineer - Palo Alto Overview: WEI is seeking an experienced Network Security Engineer, that will be project-focused, working both independently and with a team. This candidate will be primarily focused on Palo Alto design and implementation and should be familiar with and have experience with each of the features listed below. Ideally this candidate has a broad skill set within the security space and flexible enough to learn and implement complementary solutions.
What You'll Do:
- Conversion and configuration of firewall security policies
- Local, SCM and Panorama managed
- Design and configuration of layer 3 for NGFW and Prisma Access
- Interfaces
- Routing - Static, BGP, OSPF
- Tunnels - GRE, IPSec
- Remote access - Client, Clientless, Prisma
- Design and configuration of security profiles
- Anti - virus | spyware - DNS Security
- Vulnerability
- Data filtering
- URL Filtering - Header insertion, tenant restrictions
- Troubleshooting of NGFW and Prisma Access infrastructure
- Assessments of NGFW and Prisma Access infrastructure
- Documentation of NGFW and Prisma Access infrastructure
What You'll Need: - Panorama
- URL filtering
- IPS
- User-ID
- App-ID
- BGP and OSPF routing in PAN-OS
- Inspection of SSL encrypted traffic.
- VM-Series / Physical PA400 up to PA7500
- Expedition
- HA clustering.
- Large enterprise environment 100+ firewalls
- Packet capture analysis and troubleshooting
- Thorough understanding of TCP/IP and the OSI model
- PCNSE certification preferred.
- Global Protect / Prisma SASE
- Prisma Access / Prisma SD-WAN
- SD-WAN / IPSEC site to site
Experience: - Panorama/PAN-OS: 5 years
- Strata Cloud Manager /Prisma Access: 3 years
- BGP and OSPF routing in PAN-OS: 5 years
- Inspection of SSL encrypted traffic: 5 years.
- Palo Alto NGFW/Panorama in a large (100+ firewalls) environment: 5 years
- Understanding of TCP/IP and the OSI model: 5 years
- Ideally (not required), experience with Palo Alto's cloud-based IoT services for NGFWs and managing NGFWs through Strata Cloud Manager.
Education and/or Certifications: Bachelor's degree in computer related degree
