Job Description
Configure, manage and troubleshoot Palo Alto NGFWs (VM-Series / PA-Series).
Security Policy Configuration
- Security rules, NAT, PBF
- Application-based rules
- Decryption policies (SSL forward / inbound)
Object Management
- Address, service, application, tags
- Dynamic Address Groups (DAG)
- External Dynamic Lists (EDL)
VPN Implementation & Troubleshooting
- IPSec VPNs (Site-to-Site, IKEv1/IKEv2)
- GlobalProtect VPN
Traffic Flow Troubleshooting
- Traffic logs
- Session browser
- Packet capture
- Policy Optimizer
- Test policy match
Perform PAN-OS upgrades and hotfix installations.
Panorama Management
- Device groups, templates, template stacks
- Push and validate security policies
- Push and validate network templates
- Troubleshoot policy sync issues
- Troubleshoot template mismatches
- Troubleshoot commit failures and push errors
- Handle firewall onboarding/decommissioning in Panorama
- Manage shared vs local policies
Routing & Connectivity
- Static routing
- BGP (basic to intermediate)
- Analyze asymmetric routing and session drops
- Handle HA (Active/Passive)
- Synchronization issues
- Failover testing
- HA monitoring
Incident & Change Management
- Provide escalation support for firewall incidents
- Root cause analysis (RCA) for security and connectivity issues
- Implement and validate changes via change management (ITIL)
- Support audit, compliance, and risk review activities
- Coordinate with vendors (Palo Alto TAC) for advanced issues
Strata Cloud Manager & Prisma Access
- Hands-on experience with Strata Cloud Manager (SCM) for centralized management of NGFW and/or Prisma solutions.
- Hands-on experience configuring Prisma Access through SCM, including security policy and Remote Networks administration.
Mandatory Skills: Palo Alto Prisma Access .
Experience: 5-8 Years .