Network Engineer - Palo Alto Cloud Engineer

Scope of the project:
The Sr. Palo Alto Cloud Engineer will collaborate with Product Owners, Applications Owners, Network and Security teams to design and deliver optimal solutions for large-scale app and infrastructure cloud solutions. Candidates should possess proficiency in both public and hybrid cloud models. Exceptional consulting skills and the ability to clearly derive desired states from customer requests are essential. The role also requires the ability to work with delivery teams. Importantly, this role is hands-on in delivery, requiring active involvement in the implementation and execution of security solutions. This is not a developer role.

This position requires demonstrated proficiency in Palo Alto cloud firewalls with a similar level of expertise in cloud architecture and design.

DAILY DUTIES / RESPONSIBILITIES:

• Design and deploy highly available, scalable, and secure cloud infrastructure with a focus on AWS and Azure Cloud.
• Manage and deploy VM-Series Palo Alto firewalls in Azure and AWS cloud.
• Manage and deploy F5 BIG-IP LTM and ASM in Azure and AWS cloud.
• Analyze and resolve configuration issues in development, test, and production environments.
• Familiar with major security compliance frameworks and building effective monitoring, logging, and auditing of production systems to ensure compliance with mandated compliance policies (e.g., ARC-AMP (formerly known as MARS-E), NIST, HIPAA, PII, SOX, PCI, CMMC, CUI, etc.).
• Experience implementing secure (zero trust) infrastructure in cloud.
• Security experience with state and local government customers.

REQUIRED SKILLS (RANK IN ORDER OF IMPORTANCE):

• 10 years’ experience in Network Security and Engineering.
• Minimum 5 years hands-on experience designing, deploying, scaling, upgrading, troubleshooting, and optimizing Palo Alto VM-Series firewalls in both AWS and Azure cloud environments.
• Experience with Panorama management, security policy design, threat prevention tuning, and log analysis required.
• Must demonstrate ability to architect zero-trust controls using Palo Alto Technology.
• 5 years’ experience in deploying, configuring, and maintaining BIG-IP F5 LTM.

PREFERRED SKILLS (RANK IN ORDER OF IMPORTANCE):

• Palo Alto Firewalls
• F5 LTM
• F5 ASM
• F5 i-Rules
• Infoblox DDI
• Forescout
• OPSWAT MetaDefender/ICAP
• Big-IP F5 XC
• Prisma Cloud
• Cisco Umbrella

Preferred Certifications:

• PCNSA, PCNSE
• SC100 - Microsoft Cybersecurity Architect
• AWS Certified Cloud Solutions Architect

REQUIRED EDUCATION:

• College degree or 10+ years of equivalent experience as a Palo Alto Cloud Engineer.
• Must hold Palo Alto, AWS, or Azure certification.

ADDITIONAL SKILLS/DUTIES:

• Excellent communication skills, both written and verbal.
• Self-starter.
• Explicit experience in Panorama templates and device groups, GlobalProtect in cloud, and high availability VPN/Traffic routing on VM-Series.
• Experience designing and maintaining infrastructure in AWS/Azure.
• Cloud security design, operations, and automation experience.
• Documentation of security tools, deployment configuration, incident reports, etc.