Security Tool Engineer - Palo AltoPosition Overview
We are seeking an experienced Security Tool Engineer - Palo Alto to support the administration, engineering, troubleshooting, automation, and security of enterprise network and infrastructure platforms. The ideal candidate will have strong hands-on experience with Palo Alto Networks firewalls, Windows and RHEL/Linux infrastructure, enterprise networking, virtualization, backup/disaster recovery, scripting, and security hardening.
Responsibilities
- Plan, implement, administer, maintain, and troubleshoot enterprise infrastructure across Microsoft Windows Server, RHEL/Linux, virtualization, and network environments.
- Administer and troubleshoot Palo Alto Networks next-generation firewalls, including security policies, NAT, application controls, security profiles, interfaces, zones, virtual routers, VPNs, logging, and traffic monitoring.
- Review and troubleshoot blocked or denied traffic, connectivity, routing, application access, VPN, and firewall policy issues using logs, monitoring tools, packet captures, and other diagnostic tools.
- Support Palo Alto firewall upgrades, configuration changes, software/content updates, backups, maintenance, and change-management activities.
- Support firewall access requests and configuration changes following established security, least-privilege, and change-management practices.
- Collaborate with Network, Cybersecurity, Systems, Cloud, Application, and Service Desk teams to resolve complex infrastructure, firewall, and security issues.
- Troubleshoot LAN/WAN, TCP/IP, routing, DNS, DHCP, VPN, and application communication issues.
- Develop and maintain automation using Python, PowerShell, PowerCLI, BASH/Shell, Perl, JavaScript, and related technologies to support administration, configuration management, monitoring, reporting, patching, and troubleshooting.
- Perform command-line administration, Operations & Maintenance (O&M), configuration, and troubleshooting activities.
- Manage and troubleshoot enterprise backup and disaster recovery solutions, including Commvault Metallic, across physical, virtualized, and hybrid cloud environments.
- Monitor backup operations, investigate failures, perform recovery activities, and validate backup integrity and recoverability.
- Administer and support operating system updates, security patches, software deployments, and infrastructure upgrades while maintaining system availability, security, and compliance.
- Support security hardening, vulnerability remediation, configuration management, and compliance activities across Windows, Linux, virtualization, network, and security infrastructure.
- Maintain detailed documentation for system designs, configurations, firewall policies, network/security rules, procedures, troubleshooting activities, and configuration baselines.
- Analyze technical and implementation requirements, modify existing systems as needed, and develop technical specifications based on customer and operational requirements.
- Provide technical leadership and mentoring to junior team members.
- Participate in a 24/7/365 on-call rotation.
Basic Qualifications
- Bachelor's degree or higher in Computer Science, Computer Information Systems, Information Security, Information Technology, or a related field, or equivalent combination of education and experience.
- Approximately 8+ years of IT infrastructure, Information Security, or related experience.
- Current vendor or industry certification such as Palo Alto Networks, Microsoft Windows Server Hybrid Administrator, RHCE, VMware VCP-DCV, or equivalent/higher-level certification.
- Strong hands-on experience with Palo Alto Networks firewall administration and support.
- Strong knowledge of Windows and RHEL/Linux administration, Active Directory, Group Policy, DNS, DHCP, TCP/IP, IPv4/IPv6, PKI/Certificate Services, Ansible, server clustering, virtualization, and enterprise networking.
- Experience with firewall policy administration, NAT, VPNs, application controls, security profiles, network segmentation, logging, monitoring, and troubleshooting.
- Experience with backup and disaster recovery, preferably including Commvault or similar enterprise platforms.
- Strong scripting and automation skills using Python, PowerShell, PowerCLI, BASH/Shell, Perl, JavaScript, or similar technologies.
- Knowledge of security hardening and compliance standards, including CIS Controls, NIST SP 800-53 Rev. 5, and DISA STIGs.
- Ability to analyze complex infrastructure problems, identify root causes, develop solutions, and implement changes while minimizing operational impact.
- Strong problem-solving, communication, documentation, and collaboration skills.
- Ability to work independently and across cross-functional technical teams.
- U.S. Citizenship required. Security clearance: N/A.
- Ability to participate in a 24/7/365 on-call rotation.
Pay Range
$130,000-$150,000 USD
