Senior Network Architect: Squid Proxy & Palo Alto NGFW

CBSbutler; Sevenoaks; Hybride; GBP 124 000 - 163 000; Plein temps

Résumé du poste

CBSbutler Holdings Limited trading as CBSbutler in Kent is seeking an experienced Network Architect / Senior Network Engineer to secure enterprise networks with Squid Proxy and Palo Alto NGFWs. The role combines hands-on proxy and firewall administration with policy management and performance optimisations.

You will design, deploy and maintain Squid Proxy environments, manage Palo Alto firewalls and Panorama, and implement App-ID, User-ID and URL filtering to enforce rigorous security controls.

Qualifications

• 5+ years' experience supporting enterprise network infrastructure.
• Hands-on admin with Palo Alto firewalls.
• Experience configuring Palo Alto App-ID security policies.
• Extensive Squid Proxy experience with ACLs and SSL inspection.
• Experience with Palo Alto Panorama, User-ID, URL filtering and Threat Prevention.

Responsabilités

• Design, implement, configure and support enterprise Squid Proxy environments, including forward, reverse and transparent proxy deployments.
• Administer and optimise Palo Alto Next-Generation Firewalls, including Panorama management.
• Develop and maintain granular firewall security policies using Palo Alto App-ID, User-ID and Content-ID technologies.
• Configure and manage URL filtering, Threat Prevention, WildFire, GlobalProtect and SSL decryption.
• Manage proxy ACLs, authentication integrations, SSL inspection and web filtering policies.
• Review and optimise firewall rule bases, transitioning legacy port-based rules towards application‑aware security policies.
• Troubleshoot complex network and application connectivity issues across Layers 2-7.
• Perform packet analysis using tools such as Wireshark and tcpdump.
• Support firewall and proxy upgrades, migrations, patching and high‑availability configurations.
• Work alongside Cyber Security teams to support vulnerability remediation, incident investigations and security compliance activities.

Connaissances

Network architecture

Security policy management

TCP/IP networking

Troubleshooting

SSL inspection

Outils

Palo Alto firewalls

Palo Alto Panorama

Squid Proxy

App-ID

Wireshark

tcpdump

GlobalProtect

SSL decryption

Description du poste

CBSbutler Holdings Limited trading as CBSbutler in Kent is seeking an experienced Network Architect / Senior Network Engineer to secure enterprise networks with Squid Proxy and Palo Alto NGFWs. The role combines hands-on proxy and firewall administration with policy management and performance optimisations.

You will design, deploy and maintain Squid Proxy environments, manage Palo Alto firewalls and Panorama, and implement App-ID, User-ID and URL filtering to enforce rigorous security controls.