Palo Alto Firewalls Engineer

Liberty Personnel Services, Inc.; Houston (TX); On-site; USD 120,000 - 170,000; Full time

Job summary

Liberty Personnel Services, Inc. is seeking a Palo Alto Firewalls Engineer to own the edge of a global network from Houston, TX.

You will design and secure a complex, always-on network with Palo Alto at its core, implementing Zscaler, SASE, and cloud security while driving incident response and automated security workflows. You will lead firewall design, policy enforcement, and 24/7 operations, leveraging App-ID/User-ID, and Cisco routing as part of a broad security stack.

Qualifications

• 3+ years hands-on BGP, Cisco routing/switching, and WAN experience.

Responsibilities

• Design, configure, and manage Palo Alto Next-Gen Firewalls and Panorama.
• Implement and monitor ZIA/ZPA to secure user traffic at scale.
• Lead incident response and security policy development for a 24/7 global network.
• Automate firewall changes and security checks with scripting.

Skills

Palo Alto NGFW

Panorama

Zscaler ZIA

Zscaler ZPA

BGP routing

Cisco routing

Scripting (Python/Ansible/Terraform)

24/7 operations

Tools

Ansible

Python

Terraform

Job description

Palo Alto Firewalls Engineer - Own the Edge of a Global Network

Houston, TX

Lock down a global footprint with your firewall expertise

You'll be the go-to engineer designing and securing a complex, always-on global network with Palo Alto at its core.

This is where traditional networking meets modern security: BGP, Cisco routing, Zscaler, SASE, cloud security, and large-scale Palo Alto deployments all in one seat.

You won't just keep the lights on. You'll lead incident response, shape security policy, and automate the tedious work away.

If you live in Panorama, think in App-ID and User-ID, and thrive in 24/7 high-availability environments, we want to talk to you.

What You'll Work On

You'll be at the center of core network security for a complex, enterprise-scale environment:

• Palo Alto Next-Generation Firewalls and Panorama


• Zscaler Internet Access (ZIA) and Private Access (ZPA)


• Enterprise BGP routing and WAN environments


• Cisco routers and switches


• Cisco Identity Services Engine (ISE)


• Security incident response and analysis


• Security automation and scripting


• Network security documentation and standards

You'll be hands-on with tools and platforms like Palo Alto NGFW, Panorama, ZIA, ZPA, Cisco ISE, and BGP in a high-availability environment.

This is the front line of securing a global network - and you own the firewall stack.

What You'll Be Doing

• Designing and configuring Palo Alto Next-Generation Firewalls


• Managing and optimizing Panorama for centralized firewall administration


• Implementing and monitoring Zscaler ZIA and ZPA to secure user traffic


• Configuring and enforcing security policies, including App-ID and User-ID


• Managing complex enterprise networks leveraging BGP and WAN technologies


• Administering Cisco routers and switches for secure, high-performing connectivity


• Owning Cisco ISE for network access control and identity management


• Leading incident response and deep-dive analysis for network security events


• Designing and executing containment strategies during security incidents


• Automating routine firewall changes and security checks using scripting


• Creating and maintaining clear, comprehensive network security documentation


• Tracking security trends and driving a proactive security posture

What We're Looking For

• Proven experience managing critical network operations in a 24/7 high-availability environment


• Strong knowledge of incident response and policy management in a security operations context


• 3+ years of hands-on BGP, Cisco routing/switching, and WAN experience


• 3+ years of experience with Palo Alto firewalls and Panorama


• 3+ years managing large-scale firewall environments and deployments


• Excellent leadership and communication skills, able to work both independently and collaboratively


• Proactive, analytical mindset and commitment to continuous learning in security

The Experience That Will Really Get Our Attention

You've owned large Palo Alto environments, driven firewall strategy, and aren't afraid to dive into packet-level detail when an incident hits. You're comfortable turning complex, messy networks into clean, well-documented, automated security architectures.

If you've also pushed security into Azure or AWS, tied Zscaler into a SASE framework, and used tools like Ansible, Python, or Terraform to automate repetitive work, you'll stand out fast.

Why This Opportunity?

This is a chance to sit at the intersection of networking and security in a global enterprise, with direct ownership of mission-critical firewalls and policies.

You'll work across multiple technologies and platforms, not siloed into a single box or tool, and have real influence on how the organization defends its network.

For an engineer who wants depth in Palo Alto and breadth across modern security (Zscaler, SASE, cloud, automation), this role checks every box.

Must be a U.S. Citizen or Lawful Permanent Resident

Must have experience supporting 24/7 high-availability network operations