Senior Network Firewall Engineer

Webilent Technology, Inc.; United States; À distance; USD 140 000 - 190 000; Plein temps

Avantages offerts par ce poste

100% remote within the United States

Résumé du poste

Webilent Technology, Inc. is seeking a Senior Network Firewall Engineer to support a large-scale migration from Cisco AnyConnect to Palo Alto Prisma Access and GlobalProtect, with a fully remote US-based setup.

You will design, implement, and automate VPN services, mentor engineers, and collaborate across teams to ensure a smooth migration and robust security posture.

This long-term engagement requires deep firewall expertise, scripting skills in Python/PowerShell, and strong communications.

Qualifications

• 7+ years of network security or firewall engineering experience.
• Strong hands-on experience with Palo Alto Networks firewalls and GlobalProtect and/or Prisma Access.
• Experience managing Palo Alto environments through Panorama.
• Working knowledge of Cisco AnyConnect or Cisco ASA/FTD VPN environments.
• Proficiency in Python and/or PowerShell, including automation deployed in production.
• Experience using REST APIs to automate network or security platforms.
• Strong knowledge of TCP/IP, routing, NAT, SSL VPN, IPsec VPN, and network security fundamentals.
• Strong troubleshooting, documentation, and communication skills.
• Ability to guide technical work while independently delivering engineering solutions.

Responsabilités

• Design, configure, and support Palo Alto Prisma Access and GlobalProtect VPN services.
• Lead phased migrations of users and groups from Cisco AnyConnect to Palo Alto.
• Develop Python and/or PowerShell automation for onboarding, policy configuration, validation, and reporting.
• Automate recurring engineering tasks to improve speed, consistency, and accuracy.
• Establish standards for code quality, testing, documentation, and version control.
• Troubleshoot complex connectivity, authentication, routing, and security policy issues.
• Maintain firewall policies, security profiles, and configuration standards.
• Mentor engineers and review scripts and configurations.
• Create reusable technical documentation, migration runbooks, and operational procedures.
• Collaborate with network, security, identity, and service desk teams and communicate migration progress.

Connaissances

Palo Alto firewalls

GlobalProtect

Prisma Access

Python

PowerShell

REST APIs

TCP/IP

Networking fundamentals

Troubleshooting

Documentation

Communication

Outils

Panorama

Git

CI/CD

Infrastructure as Code

Description du poste

Senior Network Firewall Engineer – Palo Alto / VPN Automation

Location: 100% Remote – United States

Duration: Long-term, multiyear project

Team: Network Security / VPN Services

About the Role

We are seeking a Senior Network Firewall Engineer to support a large-scale migration from Cisco AnyConnect to Palo Alto Prisma Access and GlobalProtect.

This hands‑on role combines advanced firewall and VPN engineering with Python and/or PowerShell automation. You will help lead the migration, develop reusable tools, and establish scripting standards while remaining directly involved in implementation and troubleshooting.

Responsibilities

• Design, configure, and support Palo Alto Prisma Access and GlobalProtect VPN services.
• Lead phased migrations of users and groups from Cisco AnyConnect to Palo Alto.
• Develop Python and/or PowerShell automation for onboarding, policy configuration, validation, and reporting.
• Automate recurring engineering tasks to improve speed, consistency, and accuracy.
• Establish standards for code quality, testing, documentation, and version control.
• Troubleshoot complex connectivity, authentication, routing, and security policy issues.
• Maintain firewall policies, security profiles, and configuration standards.
• Mentor engineers and review scripts and configurations.
• Create reusable technical documentation, migration runbooks, and operational procedures.
• Collaborate with network, security, identity, and service desk teams and communicate migration progress.

Required Qualifications

• 7+ years of network security or firewall engineering experience.
• Strong hands‑on experience with Palo Alto Networks firewalls and GlobalProtect and/or Prisma Access.
• Experience managing Palo Alto environments through Panorama.
• Working knowledge of Cisco AnyConnect or Cisco ASA/FTD VPN environments.
• Proficiency in Python and/or PowerShell, including automation deployed in production.
• Experience using REST APIs to automate network or security platforms.
• Strong knowledge of TCP/IP, routing, NAT, SSL VPN, IPsec VPN, and network security fundamentals.
• Strong troubleshooting, documentation, and communication skills.
• Ability to guide technical work while independently delivering engineering solutions.

Preferred Qualifications

• Palo Alto Networks certification, such as PCNSE.
• Experience with large‑scale VPN or remote access migrations.
• Familiarity with SAML, SSO, MFA, Microsoft Entra ID/Azure AD, and Okta.
• Experience with Git, CI/CD, or infrastructure as code.
• Enterprise or managed services experience.
• 100% remote within the United States.
• Collaborative enterprise network security environment.