Firewall Engineer

Prequel Solutions; Atlanta (GA); On-site; USD 130,000 - 180,000; Full time

Job summary

Prequel Solutions seeks a Senior Firewall Engineer to design, optimize, and operate enterprise firewall infrastructure with a focus on Palo Alto networks. You will analyze application traffic, fine-tune policies, and drive Zero Trust initiatives across complex environments.

The role requires hands-on Palo Alto experience, solid IP routing knowledge, and experience in regulated or high-availability settings.

Qualifications

• Hands-on experience with Palo Alto Networks firewalls including policy and rule-set design.
• Strong knowledge of NAT and security zones, and VPN technologies (GlobalProtect and site-to-site).
• Solid understanding of IP routing and enterprise network architectures.

Responsibilities

• Review and optimize Palo Alto firewall policies to remove gaps and redundancies.
• Design, implement, and maintain firewall security policies and rule sets.
• Plan and execute NAT, security zones, and VPN configurations (GlobalProtect and site-to-site).
• Document application communication flows including source, destination, ports, protocols, and business purpose.
• Develop mappings for application, port, and IP address based on traffic analysis.
• Advance toward Zero Trust in OT and critical environments while maintaining least-privilege access.
• Coordinate with Security, OT, and Infrastructure teams for change control and governance.
• Test HA firewall configurations and perform OS and code upgrades with minimal disruption.

Skills

Palo Alto Networks firewalls

Security policy design

VPN configuration

NAT and security zones

GlobalProtect VPN

Site-to-site VPN

Documentation

Zero Trust security

Job description

We are seeking a Senior Firewall Engineer to support the design, optimization, operation, and security of enterprise firewall infrastructure across complex and critical infrastructure environments. This role will focus heavily on Palo Alto Networks technologies, application traffic analysis, firewall policy optimization, Zero Trust initiatives, and operational resiliency.

The ideal candidate will have strong hands-on Palo Alto experience, a solid foundation in IP routing and network architecture, and experience working in regulated, compliance-driven, or other high-availability environments.

Responsibilities

• Review and assess existing Palo Alto firewall policies to identify gaps, redundancies, and opportunities for optimization.
• Design, implement, and maintain firewall security policies and rule sets, including:
• NAT and security zones
• GlobalProtect VPN
• Site-to-site VPN configuration and routing
• Develop and maintain clear documentation of application communication flows, including source/destination, ports, protocols, and business purpose.
• Utilize existing flow data, traffic analysis, and firewall policy information to develop accurate application, port, and IP address mappings.
• Lead efforts to evolve firewall policies toward a Zero Trust security model, with a particular focus on OT environments and other critical systems.
• Partner with Security, OT, Infrastructure, and other stakeholders to define and enforce least-privilege access controls.
• Test and validate high-availability (HA) firewall configurations to ensure resilience, appropriate failover behavior, and operational continuity.
• Plan, execute, and validate firewall OS and code upgrades, minimizing operational risk and service disruption.
• Author detailed Methods of Procedure (MOPs) for maintenance, upgrades, and significant configuration changes.
• Follow established Change Advisory Board (CAB) processes, including risk assessment, change documentation, and approval workflows.
• Perform scheduled and emergency firewall maintenance in accordance with approved change plans.
• Validate changes following implementation and update documentation to reflect current-state configurations.
• Support audit, compliance, and cybersecurity initiatives by maintaining well-documented, testable firewall and network controls.

Qualifications

• Strong hands-on experience with Palo Alto Networks firewalls, including:
• Security policy and rule-set design
• NAT and security zones
• GlobalProtect VPN
• Site-to-site VPN configuration and routing
• Strong understanding of IP routing and network architecture within complex enterprise environments.
• Experience supporting or operating enterprise or service-provider networks.
• Experience working in regulated, compliance-driven, or security-sensitive environments.
• Strong ability to document firewall configurations, network changes, application flows, and architecture decisions.
• Experience with firewall maintenance, upgrades, change management, and troubleshooting.
• Strong communication and collaboration skills, with the ability to work across Security, OT, Infrastructure, and other technical teams.

Required Skills

Strong hands-on experience with Palo Alto Networks firewalls, including security policy and rule-set design, NAT and security zones, GlobalProtect VPN, and site-to-site VPN configuration and routing.