Network Security/Firewall Consultant

Yochana IT Solutions Inc.; Calgary; On-site; CAD 120,000 - 160,000; Full time

Job summary

Yochana IT Solutions Inc. is seeking an L3 Firewall Support Consultant to provide advanced technical support, administration, and optimization of enterprise security infrastructure, focusing on Cisco Firepower/ASA and Palo Alto firewalls.

You will handle complex incidents, implement security policies, and drive root-cause analysis across networks. Ideal candidates have 6–10+ years in network security, strong TCP/IP and VPN expertise, and hands-on Palo Alto/Cisco experience.

Qualifications

• 6–10+ years of experience in Network Security / Firewall Administration.
• Minimum 4+ years of hands-on experience with Palo Alto and Cisco Firewall platforms.
• Strong understanding of TCP/IP, Routing Protocols, VPNs, and Security Architecture.
• Experience in Incident, Change, and Problem Management processes.
• Bachelor's degree in Computer Science, IT, or related field.
• PCNSE certification is preferred.

Responsibilities

• Provide Level 3 support for Cisco ASA, Cisco Firepower (FTD/FMC), and Palo Alto firewalls.
• Troubleshoot and resolve complex network security incidents, escalations, and service outages.
• Design, review, and implement firewall security policies, NAT rules, and access control lists.
• Configure and support Site-to-Site VPNs, Remote Access VPNs, IPSec, and SSL VPN solutions.
• Perform firewall upgrades, patching, and firmware management.
• Conduct root cause analysis (RCA) and prepare incident/problem management reports.
• Monitor firewall health, performance, capacity, and security threats.
• Collaborate with SOC, Network, Cloud, and Infrastructure teams during major incidents and security events.
• Ensure compliance with security standards, audit requirements, and change management process.
• Participate in on-call support and major incident bridges.
• Create and maintain technical documentation, SOPs, and knowledge base articles.

Skills

Firewall Policy Management

NAT, ACL, Routing & Switching

VPN Technologies (IPSec/SSL VPN)

Cisco Routers & Switches

IDS/IPS, F5 Load Balancer

Python scripting for automation

Education

Bachelor's degree in Computer Science, IT, or related field

Job description

The L3 Firewall Support Consultant is responsible for providing advanced technical support, administration, troubleshooting, and optimization of enterprise network security infrastructure, primarily focusing on Cisco Firepower/ASA and Palo Alto Networks firewalls. The role involves handling complex incidents, implementing security policies, driving root cause analysis, and ensuring high availability and security compliance across the network environment. Relevant enterprise references include skills around Palo Alto, Cisco Firepower/ASA, VPNs, security policy management, incident resolution, and network security engineering.

Key Responsibilities:

• Provide Level 3 support for Cisco ASA, Cisco Firepower (FTD/FMC), and Palo Alto firewalls
• Troubleshoot and resolve complex network security incidents, escalations, and service outages
• Design, review, and implement firewall security policies, NAT rules, and access control lists
• Configure and support Site-to-Site VPNs, Remote Access VPNs, IPSec, and SSL VPN solutions
• Perform firewall upgrades, migration activities, patching, and firmware management
• Conduct root cause analysis (RCA) and prepare incident/problem management reports
• Monitor firewall health, performance, capacity, and security threats
• Support IDS/IPS, URL Filtering, Threat Prevention, and Application Control features
• Collaborate with SOC, Network, Cloud, and Infrastructure teams during major incidents and security events
• Ensure compliance with security standards, audit requirements, and change management process
• Participate in on-call support and major incident bridges
• Create and maintain technical documentation, SOPs, and knowledge base articles

Technical Skills

Primary Skills:

• Firewall Policy Management
• NAT, ACL, Routing & Switching
• VPN Technologies (IPSec/SSLVPN)

Secondary Skills

• Cisco Routers & Switches
• IDS/IPSF5 Load Balancer
• Python scripting for automation (preferred)

These skills align with network security engineer profiles referencing Palo Alto, Cisco Firepower/ASA, VPNs, routing, switching, cloud security, Splunk, SolarWinds, and related security technologies.

Experience & Qualifications

• 6–10+ years of experience in Network Security / Firewall Administration.
• Minimum 4+ years of hands‑on experience with Palo Alto and Cisco Firewall platforms.
• Strong understanding of TCP/IP, Routing Protocols, VPNs, and Security Architecture.
• Experience in Incident, Change, and Problem Management processes.
• Bachelor's degree in Computer Science, IT, or related field.

Preferred Certifications:

• PCNSE (Palo Alto Networks Certified Network Security Engineer)