Palo Alto Engineer

TEKsystems

Winston-Salem (NC)

Hybrid

USD 76,000 - 90,000

Full time

14 days+
Application generator

Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.

Get past ATS filters

Benefits offered by this job

Medical, dental & vision
401(k)
Life Insurance
Disability insurance
HSA
Transportation benefits
Employee Assistance Program
Time Off / PTO

Job summary

TEKsystems is seeking a Palo Alto Engineer in Winston-Salem, NC for a contract role. You will configure and troubleshoot enterprise security systems using Palo Alto NGFWs and Panorama, deploy firewalls, and manage policies across on-prem and cloud environments.

The role includes automating workflows and creating standard migration runbooks. Required experience with Palo Alto devices, Panorama, and scripting or IaC tools; certifications (PCNSE, CCNP, CCIE) are a plus.

Qualifications

  • Experience writing scripts or using Infrastructure-as-Code tools to speed up deployments.
  • Preferred but not required: PCNSE, CCNP or CCIE certifications.
  • Knowledge of Palo Alto Networks security devices and Panorama management.

Responsibilities

  • Configure, optimize, and troubleshoot enterprise security systems using Palo Alto NGFWs and Panorama.
  • Deploy, configure, and manage Palo Alto hardware, virtual firewalls, and cloud security tools.
  • Build and optimize security rules, NAT, and threat prevention profiles; troubleshoot complex Panorama connectivity.
  • Develop migration runbooks and operational procedures for enterprise firewall operations.

Skills

Palo Alto
Firewall
Panorama
Next generation firewall
Scripting / infrastructure-as-code
Intrusion detection

Education

PCNSE
CCNP
CCIE

Tools

Python
Ansible
Terraform

Job description

Description

Palo Alto Engineer configures, optimizes, and troubleshoots enterprise security systems using Palo Alto Networks Next-Generation Firewalls (NGFW) and management platforms like Panorama which they just updated. Deploy Firewalls: Install, configure, and manage Palo Alto hardware, virtual firewalls, and cloud security tools.Manage Policies: Build and optimize security rules, Network Address Translation (NAT), and threat prevention profiles.Troubleshoot Issues: Analyze network traffic, trace connection problems, and run deep packet inspections during outages.Automate Workflows: Maintain Documentation: Keep network diagrams, security policies, and rule standards up to date. Perform firewall onboarding, template migrations, configuration imports, and policy validation for standalone and HA firewall deployments. anaged firewall lifecycle operations, including configuration audits, commit validation, push troubleshooting, and post-migration verification. Troubleshot complex Panorama connectivity and synchronization issues involving auth keys, template pushes, HA state synchronization, and log forwarding. Develop standardized migration runbooks, operational procedures, troubleshooting documentation, and High-Level Design (HLD) documentation for enterprise firewall operations. Roughly 150 Firewalls. Panorama environment is hosted in Azure.

Skills

Paloalto, Firewall, panorama, next generation firewall, Working familiarity with basic coding or infrastructure-as-code tools, Firewall/intrusion detection

Top Skills Details

Paloalto,Firewall,panorama,next generation firewall

Additional Skills & Qualifications

Preferred Certs, but not required: PCNSE: Palo Alto Networks Certified Security Engineer, CCNP or CCIE: Cisco networking credentials Experience write scripts or use tools like Python, Ansible, or Terraform to speed up deployments

Experience Level

Expert Level

Job Type & Location

This is a Contract position based out of Winston-Salem, NC.

Pay and Benefits

The pay range for this position is $55.00 - $65.00/hr.

Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors.

Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following:

  • Medical, dental & vision
  • Critical Illness, Accident, and Hospital
  • 401(k) Retirement Plan - Pre-tax and Roth post-tax contributions available
  • Life Insurance (Voluntary Life & AD&D for the employee and dependents)
  • Short and long-term disability
  • Health Spending Account (HSA)
  • Transportation benefits
  • Employee Assistance Program
  • Time Off/Leave (PTO, Vacation or Sick Leave)
Workplace Type

This is a hybrid position in Winston-Salem,NC.

Application Deadline

This position is anticipated to close on Sep 4, 2026.

The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records.

Massachusetts Lie Detector: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.

Get your free, confidential resume review.
or drag and drop your file here.
Similar jobs

Similar jobs worth comparing

Network -6
Network -6

REALIGN LLC • Sunnyvale (CA)

On-site
USD 120,000 - 180,000
Sr. Firewall/Network Security Administrator
Sr. Firewall/Network Security Administrator

Calance • Tallapoosa (GA)

Hybrid
USD 90,000 - 130,000
EPO/PPO Medical Plans
401K Retirement vesting program
Flex Spending Plan
+1
Palo Alto Integration Engineer, MID
Palo Alto Integration Engineer, MID

Digital Global Connectors • McLean (VA)

On-site
USD 110,000 - 140,000
Network Security Engineer
Network Security Engineer

TEKsystems • Broomfield (CO)

Hybrid
USD 96,000 - 117,000
Medical, dental & vision
401(k) Retirement Plan – Pre-tax and R
Long-term disability
Network Security Engineer
Network Security Engineer

Holistic Partners, Inc • Town of Florida (NY)

On-site
USD 85,000 - 110,000
Palo Alto Firewall Lead Engineer
Palo Alto Firewall Lead Engineer

Wipro • Tulsa (OK)

On-site
USD 80,000 - 158,000
Palo Alto Integration Engineer, MID
Palo Alto Integration Engineer, MID

Digital-Global-Connectors • McLean (VA)

On-site
USD 110,000 - 140,000
Mid-Level Network Security Engineer - Palo Alto
Mid-Level Network Security Engineer - Palo Alto

Myriad360 • New York (NY)

On-site
USD 140,000 - 150,000
Unlimited PTO
Incentive compensation
401k contributions
+3
Firewall Engineer
Firewall Engineer

Saigepartners • Iowa City (IA)

On-site
USD 90,000 - 150,000
Principal Enterprise Network Security Architect
Principal Enterprise Network Security Architect

Socket.dev • California (MO)

On-site
USD 154,000 - 250,000