Network Security Engineer - Palo Alto

WEI (Worldcom Exchange, Inc.); Salem (NH); On-site; USD 110,000 - 160,000; Full time

Job summary

WEI is seeking an experienced Network Security Engineer focused on Palo Alto design and implementation. The role involves configuring NGFWs, Panorama, and Prisma Access across a large enterprise environment.

You will design layer 3 networks, manage interfaces and routing (BGP/OSPF), and implement security profiles while ensuring secure remote access and comprehensive documentation. A Bachelor’s in a related field is required.

Qualifications

• Bachelor's degree in a computer-related field required.
• Experience with Palo Alto Networks NGFWs and Panorama.
• Strong knowledge of TCP/IP, OSI model, and routing protocols.

Responsibilities

• Design and implement Palo Alto NGFW configurations and policies.
• Configure layer 3 for NGFW and Prisma Access, including interfaces, routing, tunnels, and remote access.
• Develop and tune security profiles (AV/IPS/URL filtering).
• Troubleshoot, assess, and document NGFW and Prisma Access infrastructure.

Skills

Network security fundamentals

TCP/IP & OSI

Palo Alto experience

Firewall policy design

Troubleshooting

Documentation

VPN/IPSec

Prisma Access / SD-WAN

GlobalProtect

Education

Bachelor's degree in Computer Science or related

Tools

Panorama

VM-Series

Expedition

Strata Cloud Manager / Prisma Access

Prisma SASE

PA hardware platforms (PA-400 to PA-7500)

Job description

Overview

WEI is a service and solution technology provider that focuses on building quality relationships with clients. Our sales and engineering teams work closely with our clients to optimize their environments and work efficiently by using cutting-edge technologies and best practices. Our clients benefit from our technical talents, value-added services, demonstration labs, knowledge transfer center, integration/testing labs, proof of concept labs and commitment to quality. From solution design through implementation, our sales and technical team will remain focused on providing unwavering support throughout the project. WEI is your strategic IT partner delivering custom, innovative business technology solutions that deliver real business outcomes. WEI is seeking an experienced Network Security Engineer, that will be project-focused, working both independently and with a team. This candidate will be primarily focused on Palo Alto design and implementation and should be familiar with and have experience with each of the features listed below. Ideally this candidate has a broad skill set within the security space and flexible enough to learn and implement complementary solutions.

What You’ll Do

• Conversion and configuration of firewall security policies
  • Local, SCM and Panorama managed
• Design and configuration of layer 3 for NGFW and Prisma Access
  • Interfaces
  • Routing - Static, BGP, OSPF
  • Tunnels - GRE, IPSec
  • Remote access - Client, Clientless, Prisma
• Design and configuration of security profiles
  • Anti - virus | spyware - DNS Security
  • Vulnerability
  • Data filtering
  • URL Filtering - Header insertion, tenant restrictions
• Troubleshooting of NGFW and Prisma Access infrastructure
• Assessments of NGFW and Prisma Access infrastructure
• Documentation of NGFW and Prisma Access infrastructure

What You’ll Need

• Panorama
• URL filtering
• IPS
• User-ID
• App-ID
• BGP and OSPF routing in PAN-OS
• Inspection of SSL encrypted traffic.
• VM-Series / Physical PA400 up to PA7500
• Expedition
• HA clustering.
• Large enterprise environment 100+ firewalls
• Packet capture analysis and troubleshooting
• Thorough understanding of TCP/IP and the OSI model
• PCNSE certification preferred.
• Global Protect / Prisma SASE
• Prisma Access / Prisma SD-WAN
• SD-WAN / IPSEC site to site

Experience

• Panorama/PAN-OS: 5 years
• Strata Cloud Manager /Prisma Access: 3 years
• BGP and OSPF routing in PAN-OS: 5 years
• Inspection of SSL encrypted traffic: 5 years.
• Palo Alto NGFW/Panorama in a large (100+ firewalls) environment: 5 years
• Understanding of TCP/IP and the OSI model: 5 years
• Ideally (not required), experience with Palo Alto's cloud-based IoT services for NGFWs and managing NGFWs through Strata Cloud Manager.

Education And/or Certifications

Bachelor's degree in computer related degree

EEOC Statement

WEI is an Equal Opportunity Employer: The Company believes that all persons are entitled to equal employment opportunity. The Company will not discriminate or tolerate discrimination against any employee or applicant because of race, color, creed, religion, genetic information, sex, sexual orientation, national origin, age, status with regard to public assistance, marital or veteran status, disability or any other characteristic protected by local, state or federal law.