Network Security Engineer

AXA Professionals; Salem (NH); Hybrid; USD 120,000 - 180,000; Full time

Job summary

AXA Professionals seeks a seasoned security engineer to design, deploy, and manage Palo Alto networks across enterprise environments. You will configure Panorama, NGFWs and Prisma Access, and implement secure VPNs and SD-WAN connections.

Responsibilities include optimizing security profiles, monitoring traffic, performing packet captures, and documenting configurations. A Bachelor's degree is required and a hybrid work schedule is available with onsite three days per week.

Qualifications

• 5+ years hands-on experience with Palo Alto Panorama & PAN-OS.
• 5+ years BGP and OSPF routing experience within PAN-OS.
• 5+ years inspecting SSL-encrypted traffic and enterprise-scale NGFW deployments.

Responsibilities

• Convert, configure, and manage firewall policies across local firewalls, SCM, and Panorama.
• Design and configure Layer 3 networking for Palo Alto NGFW and Prisma Access.
• Configure and troubleshoot GRE and IPsec tunnels and VPNs (GlobalProtect, Prisma).
• Design and configure security profiles including antivirus, DNS security, URL filtering.
• Implement URL filtering with header insertion and tenant restrictions.
• Troubleshoot and document Palo Alto NGFW and Prisma Access infrastructure.
• Perform packet-capture analysis and advanced network/security troubleshooting.

Skills

Palo Alto Panorama

PAN-OS

BGP

OSPF

SSL inspection

Strata Cloud Manager

Prisma Access

GlobalProtect

Prisma SASE

VPN technologies

URL Filtering

HA clustering

Expedition

TCP/IP

packet capture

SD-WAN/IPsec

Education

Bachelor's degree in a computer-related field

Tools

VM-Series

Expedition

Strata Cloud Manager

Prisma Access

Job description

Junior: $120,000–$140,000; Senior: $160,000–$180,000.

Hybrid schedule 3 days onsite and 2 days remote

WHAT YOU'LL DO

• Convert, configure, and manage firewall security policies across locally managed firewalls, Strata Cloud Manager (SCM), and Panorama.
• Design and configure Layer 3 networking for Palo Alto NGFW and Prisma Access, including interfaces, static routing, BGP, and OSPF.
• Configure and troubleshoot GRE and IPsec tunnels, site-to-site VPN connectivity, and remote-access solutions including GlobalProtect, clientless access, and Prisma.
• Design and configure security profiles including antivirus, anti-spyware, DNS Security, vulnerability protection, data filtering, and URL filtering.
• Implement URL filtering capabilities such as header insertion and tenant restrictions.
• Troubleshoot, assess, and document Palo Alto NGFW and Prisma Access infrastructure.
• Perform packet-capture analysis and advanced network/security troubleshooting in large enterprise environments.

REQUIRED TECHNICAL EXPERIENCE

• 5+ years of hands-on experience with Palo Alto Panorama and PAN-OS.
• 5+ years of BGP and OSPF routing experience within PAN-OS.
• 5+ years of experience inspecting SSL-encrypted traffic.
• 5+ years supporting Palo Alto NGFW/Panorama environments at enterprise scale, ideally 100+ firewalls.
• 3+ years of experience with Strata Cloud Manager and/or Prisma Access.
• Hands-on experience with Panorama, URL Filtering, IPS, User-ID, App-ID, HA clustering, and Expedition.
• Experience with VM-Series and physical Palo Alto platforms ranging from PA-400 through PA-7500.
• Experience with GlobalProtect / Prisma SASE, Prisma Access / Prisma SD-WAN, and SD-WAN / IPsec site-to-site connectivity.
• Strong understanding of TCP/IP and the OSI model, with demonstrated packet-capture analysis and troubleshooting skills.

PREFERRED QUALIFICATIONS

• Experience with Palo Alto cloud-based IoT services for NGFWs.
• Experience managing NGFWs through Strata Cloud Manager.

EDUCATION

• Bachelor's degree in a computer-related field.