Palo Alto Network Security Engineer

Tandym Group Internal; Vienna (VA); Remote; USD 100,000 - 130,000; Full time

Job summary

A leading financial institution seeks a Network Security Engineer specializing in Palo Alto for a major firewall optimization project. The role involves reviewing thousands of firewall rules and requires extensive experience in network security. Work remotely with a flexible schedule and the opportunity to engage in enterprise-scale security initiatives involving innovative tools.

Qualifications

• 7+ years of hands-on experience in Network Security / Firewall Engineering.
• Experience in financial enterprise environments is preferred.
• Expertise with Palo Alto NGFW and Security Configuration Management (SCM).

Responsibilities

• Reviewing and optimizing over 30,000 firewall rules.
• Approving new firewall rule requests for compliance.
• Providing on-call support and participating in after-hours changes.

Skills

Network Security

Firewall Engineering

Problem-Solving

Communication

Education

Bachelor’s Degree in Computer Science, Electrical Engineering, or related field

Tools

Palo Alto NGFW

Cisco ASA

Check Point

FireMon

ServiceNow

Azure

Splunk

Job description

A top Fortune 50 financial institution is currently seeking a Network Security Engineer (specializing in Palo Alto) to support a major firewall rules validation and optimization project. This role offers the opportunity to work on enterprise-scale security initiatives involving on-premise and cloud infrastructure, integrating cutting-edge tools like FireMon, ServiceNow, and Illumio.

About the Opportunity:

• Schedule: Monday to Friday (occasional after-hours/on-call support required)
• Assignment Length: Ongoing
• Environment: Enterprise security team; highly regulated financial setting
• Setting: Remote

Responsibilities:

• Reviewing and optimizing over 30,000 firewall rules across multiple platforms
• Approving new firewall rule requests for compliance with security policies
• Identifying legacy or unused rules and coordinating their removal
• Supporting integration of FireMon with ServiceNow and Illumio
• Conducting audits and documentation of rule ownership and asset validation
• Monitoring ticket queues and supporting SLA adherence
• Providing on-call support and participating in after-hours changes as needed

Qualifications:

• 7+ years of advanced hands-on experience in Network Security / Firewall Engineering
• Bachelor’s Degree in Computer Science, Electrical Engineering, or related field (or equivalent experience)
• Cisco CCNA or CompTIA Security+ certification
• Expertise with Palo Alto NGFW and Security Configuration Management (SCM)
• Experience with Cisco ASA/CDO and Check Point firewall environments
• FireMon Security Manager experience
• Working knowledge of ServiceNow ticketing systems
• Experience working in large-scale or Financial enterprise environments
• Strong problem-solving and troubleshooting skills
• Excellent written and verbal communication abilities

Desired Skills:

• Experience with Azure cloud environments
• Familiarity with Illumio segmentation and micro-perimeter policy tools
• Splunk experience for log and security event correlation
• Cross-functional collaboration across IT and business units
• Process-driven approach to audit, compliance, and documentation