Key Responsibilities:
Business impact
- Ensure operational and strategic excellence of enterprise network and security infrastructure.
- Strengthen the organization’s security posture through effective design, deployment, and governance of Palo Alto Networks, Prisma Access, Panorama, firewall, VPN, and threat prevention solutions.
- Improve network reliability and service continuity through advanced troubleshooting across multiple network segments.
- Enable stronger service support by transferring technical knowledge to network teams and support areas such as helpdesk.
- Support compliance and operational control through detailed technical documentation, standardized change procedures, configuration control, and versioning.
Strategic Leadership & Road mapping
- Lead technical network teams, promoting continuous professional and technical development.
- Manage people with focus on performance, engagement, and training.
- Define and promote network security standards aligned with industry practices and regulatory expectations.
- Support the evolution of enterprise network architecture through hands‑on leadership in network and security projects.
- Translate technical topics effectively between Spanish, Portuguese, and English-speaking stakeholders.
- Own and govern enterprise network security platforms based on Palo Alto Networks, with emphasis on Prisma Access and Panorama.
- Manage Panorama capabilities including device groups, templates, and centralized policy enforcement.
- Govern firewall policies, NAT rules, security profiles, application controls, URL filtering, IPS/IDS, WildFire, and VPN capabilities.
- Oversee network security components involving PAN-OS, App-ID, GlobalProtect VPN, BGP, Cisco Switching, Meraki Wi‑Fi, and VPN services.
- Maintain technical documentation, including HLD, LLD, network diagrams, configurations, device inventory, topology, and as‑built documentation.
Enterprise Application Delivery, Operations & Governance
- Design, install, and deploy Prisma Access and Palo Alto firewalls in complex enterprise environments.
- Develop and optimize firewall policies, NAT rules, security profiles, and application controls.
- Manage threat prevention solutions including IPS/IDS, URL filtering.
- Perform advanced troubleshooting across multiple network segments.
- Ensure network designs comply with industry standards and regulations.
- Define change management procedures including configuration control and versioning.
- Create and maintain detailed technical documentation, including HLD, LLD, network diagrams, as‑built documentation, configurations, device inventory, and topology.
Provide leadership and develop talent
- Lead, coach, and develop network technical teams with focus on performance, engagement, training, and technical growth.
- Develop training materials for IT teams.
- Conduct training sessions on network design, configuration, and management.
- Document technical knowledge for internal handover and long‑term operational continuity.
- Support helpdesk and related support areas through structured knowledge transfer.
Required (skills and experience)
Technical & Business Expertise
- 10+ years of experience in network security engineering, with hands‑on experience in Palo Alto Networks, Prisma Access, and Panorama.
- Advanced knowledge of PAN-OS, App-ID and GlobalProtect VPN.
- Deep understanding of BGP, Cisco Switching, Meraki Wi‑Fi, and VPN.
- Strong grasp of access control, NAT, SSL decryption, and Palo Alto firewall policies.
- Experience designing, installing, and deploying Prisma Access and Palo Alto firewalls in complex enterprise environments.
- Experience managing Panorama device groups, templates, and centralized policy enforcement.
- Experience developing and optimizing firewall policies, NAT rules, security profiles, and application controls.
- Experience managing threat prevention solutions including IPS/IDS, URL filtering.
- Strong capability in advanced troubleshooting across multiple network segments.
- Ability to create and maintain detailed technical documentation, including HLD, LLD, network diagrams, as‑built documentation, configurations, device inventory, and topology.
Leadership & Delivery
- Proven ability to lead technical network teams and promote continuous professional and technical development.
- Experience managing people with focus on performance, engagement, and training.
- Hands‑on involvement in all phases of network and security projects.
- Ability to conduct knowledge transfer to network teams and support areas such as helpdesk.
- Ability to develop training materials and conduct training sessions on network design, configuration, and management.
- Strong communication skills, including technical translation between Spanish, Portuguese, and English.
Other Requirements
- Experience in a mid‑to‑large enterprise or complex enterprise network environment.
- Familiarity with change management procedures, configuration control, versioning, and operational governance.
- Strong analytical and troubleshooting capabilities.
- English and Spanish proficiency are required.
- Portuguese capability is strongly relevant due to the stated requirement for technical translation between Portuguese and English.
- Ability to operate as both a people leader and hands‑on technical reference
Preferred Qualifications
- MBA or other graduate degree in a related field is a plus.
- Degree in Information Technology, Computer Science, Cybersecurity, Telecommunications, Network Engineering, Systems Engineering, or related field.
- Palo Alto Networks Certified Network Security Engineer — PCNSE.
- Palo Alto Networks Certified Network Security Administrator — PCNSA.
- Palo Alto Networks Prisma Access certification or formal Prisma Access training.
- Cisco CCNP Enterprise or CCNP Security.
- Meraki networking certification or equivalent practical experience.
- Security certifications such as CISSP, CCSP, CompTIA Security+, or equivalent.
- Background in enterprise firewall modernization, SASE, Zero Trust Network Access, VPN transformation, or network security governance.
- Spanish and Portuguese language capabilities.
- Note: Certifications are preferred only. The source role states that certifications are not mandatory and that a technical assessment will be conducted.