Senior Firewall Engineer | Network Security Engineer

MDAEdge; New York (NY); On-site; USD 63,168 - 90,240; Full time

Job summary

MDAEdge is seeking a Senior Firewall Engineer for an on-site role based in New York City, NY or Pittsburgh, PA. You will drive an enterprise-level Palo Alto firewall refresh, planning and executing migrations with minimal production disruption.

Responsibilities include migrating policies and configurations, validating post-migration functionality, and collaborating with network teams. Strong hands-on Palo Alto experience and change-control discipline are required.

Qualifications

• Hands-on experience with Palo Alto devices in enterprise environments.
• Experience leading large firewall refreshes and migration projects.
• Deep understanding of firewall policies, NAT, zones, and rule management.
• Strong routing and switching knowledge applicable to large networks.
• Experience operating in production environments with strict change control.

Responsibilities

• Plan and execute enterprise Palo Alto firewall migrations.
• Migrate firewall policies, security rules, and configurations to new infrastructure.
• Validate firewall functionality and network connectivity post-migration.
• Collaborate with network teams on routing, switching and policy changes.
• Troubleshoot issues during implementation and deployment processes.
• Document all configurations and migration steps thoroughly.

Skills

Palo Alto Firewalls

Migration planning

Networking fundamentals

English proficiency

Tools

Cisco ASA

Job description

Job Summary:

Our client is seeking an experienced Senior Firewall Engineer for a permanent, on-site role based in New York City, NY or Pittsburgh, PA. This position is critical to supporting an enterprise-level Palo Alto firewall refresh initiative, focusing on the planning and execution of firewall migrations while ensuring minimal disruption to production environments.

Compensation:

• Hourly Rate: $60.00 - $75.00 per hour (W-2).
• Annual Salary Equivalent: $63,168 - $90,240 USD.

Core Responsibilities:

• Plan and execute enterprise-level Palo Alto firewall migration activities.
• Migrate firewall policies, security rules, and configurations to new infrastructure.
• Validate firewall functionality and network connectivity post-migration.
• Collaborate with network engineering teams to support routing, switching, and security policy changes.
• Troubleshoot firewall and network connectivity issues during implementation.
• Participate in formal change management and production deployment processes.
• Document all firewall configurations, migration steps, and implementation procedures.

Required Qualifications:

• Strong hands-on experience managing Palo Alto Firewalls.
• Proven experience performing enterprise firewall refreshes and complex migration projects.
• Deep understanding of firewall policies, NAT, security zones, and rule management.
• Intermediate to advanced knowledge of routing and switching protocols.
• Experience supporting large-scale enterprise production environments.
• Native or bilingual proficiency in English.

Preferred Qualifications:

• Experience with Cisco ASA firewalls.
• Experience working within strictly change-controlled production environments.
• Relevant industry certifications, including:
  • Palo Alto Networks Certified Network Security Engineer (PCNSE).
  • CCNP Security or CCNP Enterprise.
  • CCIE Security.