Palo Alto Network Engineer (Cloud)

KRYJAS PRIVATE LIMITED; Singapore; Hybrid; SGD 120,000 - 190,000; Full time

Job summary

KRYJAS PRIVATE LIMITED in Singapore seeks an experienced Network Security Engineer to design, implement, and support enterprise security using Palo Alto firewalls and cloud controls. You will manage NGFW, Panorama, and GlobalProtect while collaborating with cloud and infra teams.

The role requires 5+ years in network security, strong troubleshooting, and hands-on cloud networking experience across AWS/Azure/GCP. Join a team focused on secure connectivity and ongoing security enhancements.

Qualifications

• 5+ years of experience in Network Security Engineering.
• Hands-on with Palo Alto NGFW, Panorama and GlobalProtect.
• Experience with AWS, Azure or GCP.
• Strong understanding of TCP/IP, Routing, Switching, VPN, BGP, OSPF, NAT and DNS.
• Experience with firewall policy management, security hardening and threat mitigation.
• Knowledge of cloud networking concepts including VPC/VNet, Transit Gateway, Load Balancers and Cloud Security.
• Strong troubleshooting and analytical skills.

Responsibilities

• Design, implement, and support enterprise network security solutions using Palo Alto firewalls.
• Manage and troubleshoot Palo Alto NGFW, Panorama and Global Protect.
• Deploy and maintain cloud network security solutions across AWS, Azure, and/or GCP.
• Configure and manage cloud-native security controls, security groups, network segmentation, and firewall policies.
• Perform firewall rule reviews, security assessments, and compliance checks.
• Monitor network performance and security events, providing timely incident resolution.
• Collaborate with cloud, infrastructure, and application teams to ensure secure connectivity and architecture.
• Support network migrations, cloud transformation projects and security enhancements.
• Create and maintain technical documentation, network diagrams and operational procedures.

Skills

Palo Alto NGFW

Panorama

GlobalProtect

AWS/Azure/GCP

TCP/IP Networking

VPN

BGP/OSPF

Firewall policy management

Security hardening

Cloud networking concepts

Tools

Palo Alto NGFW

Panorama

GlobalProtect

Terraform

Ansible

Python

Job description

Key Responsibilities

• Design, implement, and support enterprise network security solutions using Palo Alto firewalls.


• Manage and troubleshoot Palo Alto Next-Generation Firewalls (NGFW), Panorama, Global Protect VPN, URL Filtering, IPS and Threat Prevention.


• Deploy and maintain cloud network security solutions across AWS, Azure, and/or Google Cloud Platform (GCP).


• Configure and manage cloud-native security controls, security groups, network segmentation, and firewall policies.


• Perform firewall rule reviews, security assessments, and compliance checks.


• Monitor network performance and security events, providing timely incident resolution.


• Collaborate with cloud, infrastructure, and application teams to ensure secure connectivity and architecture.


• Support network migrations, cloud transformation projects and security enhancements.


• Create and maintain technical documentation, network diagrams and operational procedures.

Required Skills & Experience

• 5+ years of experience in Network Security Engineering.


• Strong hands-on experience with Palo Alto NGFW, Panorama and Global Protect.


• Experience with cloud platforms such as AWS, Azure or GCP.


• Good understanding of TCP/IP, Routing, Switching, VPN, BGP, OSPF, NAT and DNS.


• Experience with firewall policy management, security hardening and threat mitigation.


• Knowledge of cloud networking concepts including VPC/VNet, Transit Gateway, Load Balancers and Cloud Security.


• Strong troubleshooting and analytical skills.

Preferred Qualifications

• Palo Alto Certifications (PCNSA, PCNSE).


• Cloud Certifications (AWS Solutions Architect, AWS Security Specialty, Azure Administrator, Azure Security Engineer).


• Experience with Prisma Access, Prisma Cloud or SASE solutions.


• Knowledge of automation tools such as Python, Terraform or Ansible is an advantage.