Senior Palo Alto Networks Consultant

keystone-solutions; Brussel; Hybrid; EUR 85,000 - 110,000; Full time

Job summary

Keystone Solutions seeks a Senior Palo Alto Networks Expert for a client-site consultancy. You will maintain and evolve the network security architecture across multiple sites, focusing on secure migrations from Forcepoint to Palo Alto.

Lead installation, configuration, and management of Palo Alto firewalls; engage in network segmentation and hardening projects; document procedures and provide technical guidance to teams.

Qualifications

• Graduate or bachelor’s degree in computer science or equivalent experience.
• 5+ years of experience in network security.
• Experience with multi-site production environments and critical production changes.

Responsibilities

• Manage and evolve Palo Alto/FW infrastructure (Palo Alto, Panorama).
• Migrate security policies from Forcepoint to Palo Alto.
• Define and implement secure network architectures and segmentation.

Skills

Palo Alto NGFW

Panorama

Forcepoint migration

Firewall migration

Network security architecture

Routing protocols

Education

Bachelor's degree in CS

Certifications: PCNSA/PCNSE

Tools

F5 BIG-IP

Azure

Job description

Mission Overview:

Keystone Solutions is seeking a Senior Palo Alto Networks Expert for a consultancy mission at a client site. This role is crucial for strengthening the network security team and supporting various strategic transformation projects. As a consultant, you will engage in critical and complex environments, ensuring the operational maintenance and evolution of the network security architecture.

Key Responsibilities:

• Manage, migrate, and continuously evolve the network security infrastructure (Palo Alto, Panorama), focusing on a controlled migration from Forcepoint and ensuring operational continuity in a critical multi-site environment.
• Oversee the ICT security infrastructure: installation, configuration, and management of Palo Alto firewalls.
• Execute migrations of firewalls and security policies from Forcepoint to Palo Alto Networks (analysis, preparation, implementation, validation).
• Participate in defining network security architectures.
• Administer, operate, and optimize the Palo Alto infrastructure, including Panorama.
• Engage in projects related to network segmentation, flow security, and infrastructure hardening.
• Prepare technical documentation and operational procedures.
• Participate in changes within a critical production environment.
• Advise on technical solutions for securing connections with external partners.
• Implement solutions to address any vulnerabilities.

Core Competencies:

• Installation, configuration, administration, and optimization of the Palo Alto NGFW/Panorama infrastructure.
• Migration expertise: analysis, preparation, execution, and validation of firewall migrations (Forcepoint to Palo Alto).
• Network security architecture: segmentation, hardening, VPN, dynamic routing (BGP/OSPF), interoperability with F5 BIG-IP.
• Advanced troubleshooting and management of critical incidents in a multi-site production environment.
• Accurate documentation and collaboration with multiple technical teams (network, security, systems, operations, projects).

Communication and Collaboration:

• Strong written and verbal communication skills; good technical communication.
• Collaborate with multiple infrastructure and security teams (network, security, systems, operations, projects).
• Bilingual (French, Dutch) preferred or sufficient basic knowledge of a second national language; technical English required.

Level and Experience:

• Expert and independent execution under general guidance (SFIA level 4 – Enable), senior technical profile.
• Minimum 5+ years of experience in network security, autonomy, and initiative; capable of handling both daily operational tasks and strategic transformation projects; explicitly not a junior role.

Education:

• Graduate or bachelor’s degree in computer science, or equivalent proven experience. Desired certifications: PCNSA, PCNSE, F5 certifications (advantageous), additional security certifications (advantageous).

Practical Information:

• Status: Recruitment / external assignment.
• Responsibility level: SFIA level 4 – Enable (senior technical).
• Reports to: Team Leader Network & Security.
• Work regime: Full-time; remote work possible up to 3 days/week.
• Location: Brussels.
• Team: Network & Security Team, in collaboration with systems, operations, and project teams.

Duration:

01/11/2026 - 31/12/2026 2 months (full time)

Skills required:

• F5 BIG-IP: LTM-module en idealiter ASM/AWAF, load balancing en reverse proxy - Level: Confirmed - Most recent: Any time
• Forcepoint/Stonesoft: analyse van bestaande regels, objecten, NAT, VPN; opstellen van migratiematric - Level: Confirmed - Most recent: Any time
• Microsoft Azure-omgevingen; proxy-/WAF-oplossingen; SOC-/SecOps-context (troeven) - Level: Confirmed - Most recent: Any time
• Migratie & netwerkbeveiliging: migratie van Forcepoint naar Palo Alto, TCP/IP-protocollen, VLAN, VPN - Level: Confirmed - Most recent: Any time
• Palo Alto Networks: NGFW, Panorama, App-ID, User-ID, Content-ID, URL Filtering, WildFire, GlobalProt - Level: Confirmed - Most recent: Any time

Language requirements:

Dutch
Level Active knowledge
English
Level Active knowledge
French
Level Active knowledge

If you are ready to tackle technical and strategic challenges in a dynamic consultancy environment,