Job Summary
The Senior Network Firewall Engineer will support a large-scale migration from Cisco AnyConnect to Palo Alto Prisma Access and GlobalProtect VPN services. This hands-on senior role involves leading technical migration activities, developing automation to streamline user and group transitions, and establishing engineering standards for scripting and tooling. The engineer will also provide technical direction, troubleshoot complex network security issues, and collaborate with network, security, and service desk teams to ensure reliable and repeatable migration processes.
Key Responsibilities
• Design, configure, and support Palo Alto Prisma Access and GlobalProtect VPN services.
• Lead the technical execution of phased migrations of users and groups from Cisco AnyConnect to Palo Alto solutions.
• Design and develop Python and/or PowerShell automation for migration activities, including user and group onboarding, policy and configuration builds, validation checks, and reporting.
• Automate recurring engineering tasks to reduce manual effort and minimize errors.
• Establish standards for code quality, testing, and version control for team automation.
• Serve as an escalation point for complex connectivity, authentication, and policy issues.
• Maintain firewall policies, security profiles, and configuration standards.
• Mentor junior engineers and review their scripts and configurations.
• Document technical designs, runbooks, and automation to support reuse and consistency.
• Collaborate with network, security, and service desk teams to coordinate migration activities.
• Communicate migration progress and technical updates to stakeholders.
Required Qualifications
• 7+ years of experience in network or firewall engineering.
• Deep hands-on experience with Palo Alto Networks firewalls, including Panorama, GlobalProtect, or Prisma Access.
• Working knowledge of Cisco AnyConnect or Cisco ASA/FTD VPN technologies.
• Proficiency in Python and/or PowerShell, with demonstrated experience building automation used in production.
• Strong understanding of TCP/IP, routing, network address translation (NAT), SSL/IPsec VPN, and network security fundamentals.
• Experience with REST APIs and scripting against network or security platforms.
• Strong troubleshooting and written communication skills.
Preferred Qualifications
• Palo Alto certification, preferably PCNSE.
• Experience leading large-scale VPN or remote access migrations.
• Familiarity with SAML/SSO, multi-factor authentication (MFA), and identity integrations such as Microsoft Entra ID or Okta.
• Experience with Git, CI/CD, or infrastructure-as-code practices.
• Experience working in enterprise or managed services environments.
