Principal-level Firewall Engineer

ClifyX, INC; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

Hyra seeks a Principal-level Firewall Engineer to lead advanced security design and deployment for enterprise networks in Phoenix and Dallas. The role requires deep expertise in Palo Alto and Cisco firewalls, remote access, and robust routing.

You will own architecture, implement secure connectivity, and guide operations in a high-availability environment. 9+ years of experience and strong collaboration with vendors are essential.

Qualifications

• 9+ years in firewall engineering and network security.
• Expert in Palo Alto and Cisco firewall platforms.
• Experience with Azure Firewall design and operations.
• Proficient in Cisco AnyConnect remote access VPN.
• Strong routing skills with BGP and OSPF.
• Experience with site-to-site VPNs and extranet connectivity in large enterprises.

Responsibilities

• Design, deploy, and optimize firewall architectures across enterprise networks.
• Lead implementation and rollout of secure remote access and VPN solutions.
• Troubleshoot complex connectivity and performance issues in large environments.
• Collaborate with vendors and partners on firewall integrations.

Skills

Firewall engineering

Enterprise networking

Troubleshooting

Security architecture

High availability

Tools

Palo Alto Firewalls

Cisco ASA / Secure Firewall

Azure Firewall

Cisco AnyConnect VPN

BGP

OSPF

Site-to-site VPN

Extranet connectivity

VPN troubleshooting

Job description

Job Description Job Description Job Title: Principal-level Firewall Engineer
Location: Phoenix, Az / Dallas, TX
Employment Type : Full Time
Experience Required - 9 Years

Roles & Responsibilities

Seeking a highly experienced Principal-level Firewall Engineer to join our Network Enterprise Services organization
We are looking for candidates with deep technical expertise in network security, firewall engineering, remote access, and routing technologies. The ideal candidate should possess strong design and implementation experience across the following areas:

Required Skills & Experience

• Extensive experience with Palo Alto Networks Firewalls
• Extensive experience with Cisco Firewalls (ASA and/or Secure Firewall)
• Experience with Azure Firewall design, implementation, and operations
• Expert-level knowledge of Cisco AnyConnect Remote Access VPN
• Strong routing expertise, including:
• BGP
• OSPF
• Troubleshooting and design on both Cisco and Palo Alto platforms
• Proven experience designing, implementing, and supporting:
• Extranet connectivity solutions
• Partner/Vendor network integrations
• Site-to-site VPN and secure connectivity architectures
• Strong troubleshooting, operational support, and architecture/design capabilities
• Experience working in large enterprise environments with high availability and security requirements

Preferred Qualifications

• Palo Alto certifications (PCNSE or equivalent)
• Cisco security and networking certifications
• Experience with cloud networking and hybrid connectivity architectures
• Financial services or highly regulated industry experience