Cloud Firewall Architect

HonorVet Technologies; Downey (CA); On-site; USD 165,000 - 248,000; Full time

Job summary

HonorVet Technologies in Downey, CA is seeking a Cloud Firewall Architect for a 12+ month engagement. You will design and implement NGFW-based security architectures across AWS, Azure, GCP, and OCI, focusing on Palo Alto platforms and scalable cloud network security.

The role requires deep hands-on experience with VM-Series, Panorama, GWLB, VPCs, and hybrid connectivity, plus strong expertise in network segmentation, security policies, and IaC automation. W2 only, 12+ months, on-site in Downey.

Qualifications

• 5+ years with Palo Alto physical firewall appliances, VM-Series, Panorama, SCM.
• 5+ years with NGFW tech incl. IPS, App-ID, User-ID, SSL/TLS inspection.
• 3+ years with cloud security across AWS, Azure, GCP, OCI.
• 5+ years with cloud traffic inspection architectures (GWLB, TGW, VPCs).
• 4+ years deploying cloud firewalls and security controls (AWS/Azure/GCP/OCI).
• 5+ years implementing hybrid connectivity with BGP (Transit Gateway, ExpressRoute).

Skills

Palo Alto Networks

NGFW technologies

Cloud security architectures

AWS

Azure

GCP

OCI

Firewall policy & segmentation

Networking basics (routing/switching)

IaC concepts

Tools

Panorama

VM-Series

Strata Cloud Manager

Job description

HonorVet Technologies is a Service Disable Veteran-Owned IT staffing firm, ISO 9001, and ISO 27001 certified, working with federal agencies, state governments, and Fortune 500 enterprise clients across the US. What makes us different isn't a tagline; it's the way we work. We don't forward resumes and hope for the best. We take the time to understand where a professional like you are headed and only reach out when we genuinely believe there's a fit worth exploring.

Job Title: Cloud Firewall Architect

Duration: 12+ months

Location: Downey, CA, 90242

W2 Only

Job Description:

Skills Required

• Advanced knowledge and proficiency with Palo Alto Networks security platforms.
• Advanced knowledge of Next-Generation Firewall (NGFW) technologies and security concepts.
• Advanced knowledge of cloud network security technologies and architectures across Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), and Oracle Cloud Infrastructure (OCI).
• Advanced knowledge of enterprise firewall technologies and migration concepts associated with legacy platforms.
• Advanced knowledge of firewall security policy principles, access control, rule optimization, network segmentation, and security best practices.
• Advanced knowledge of routing and switching technologies.
• Strong knowledge of network services and security technologies.
• Strong knowledge of network security monitoring and threat analysis.
• Strong knowledge of high-availability and fault-tolerant network security concepts.
• Strong knowledge of firewall software and security content management.
• Working knowledge of private network interconnection technologies.
• Strong knowledge of network security automation and Infrastructure as Code (IaC) concepts.

Experience Required

• At least five (5) years of experience with Palo Alto Networks physical firewall appliances, VM-Series, Panorama, Device Groups, Templates, Template Stacks, and Strata Cloud Manager (SCM), or comparable.
• At least five (5) years of experience with Next-Generation Firewall (NGFW) technologies, Intrusion Prevention Systems (IPS), Application Identification (App-ID), User Identification (User-ID), URL and content filtering, and Secure Sockets Layer/Transport Layer Security (SSL/TLS) inspection, or comparable.
• At least three (3) years of experience with cloud network security technologies in Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), and Oracle Cloud Infrastructure (OCI), including third-party and native cloud security controls, or comparable.
• At least five (5) years of experience with cloud traffic inspection architectures involving AWS Gateway Load Balancer (GWLB), AWS Transit Gateway (TGW), security Virtual Private Clouds (VPCs), Azure hub-and-spoke architectures, Network Virtual Appliances (NVAs), and User-Defined Routing (UDR), or comparable.
• At least four (4) years of experience in deploying and operating cloud-based firewalls, network virtual appliances, and native security controls in one or more of AWS, Azure, GCP, or OCI.
• At least five (5) years of experience in implementing and operating hybrid connectivity with dynamic routing (BGP), including AWS Transit Gateway, Azure ExpressRoute, or equivalent private interconnects.