Senior NGFW Firewall Migration Engineer – Palo Alto

Cypress HCM; Pennsylvania; On-site; USD 96,000 - 110,000; Full time

Job summary

Cypress HCM is seeking an experienced Senior Network Security Consultant to support enterprise-grade NGFW deployments and firewall modernization. You will configure, migrate, and validate NGFW environments with a emphasis on Palo Alto technologies and related Cisco platforms.

You’ll develop detailed migration plans, coordinate cutovers, and ensure post-deployment validation across enterprise networks, while contributing to documentation and knowledge transfer for customer teams.

Qualifications

• Bachelor's degree in a related field.
• 5+ years of professional network security engineering experience.
• Hands-on NGFW deployment and HA pair experience.
• Palo Alto Networks PCNSE or equivalent.
• Experience migrating firewall rules and NAT configurations.
• Strong understanding of core networking technologies.
• Ability to produce clear technical documentation.
• Willingness to travel to customer sites.

Responsibilities

• Configure, deploy, and migrate NGFW platforms (Palo Alto focus).
• Work with Cisco firewall platforms.
• Configure interfaces, routing, NAT, VLANs, security zones.
• Migrate existing firewall rules and policies to new NGFWs.
• Plan production traffic migrations and write MOPs.
• Coordinate firewall cutovers during maintenance windows.
• Perform post-migration testing of connectivity and security.
• Create as-built docs and architecture diagrams.
• Transfer knowledge to customer teams.

Skills

Firewall engineering

Network security

Documentation

Travel readiness

Education

Bachelor's degree in Computer Science / IT / Cybersecurity / Engineering

Tools

Palo Alto Networks NGFW

Cisco firewalls

Firepower/FTD

ASA

Python

Ansible

Azure DevOps (ADO)

Job description

Cypress HCM is seeking an experienced Senior Network Security Consultant to support enterprise-grade NGFW deployments and firewall modernization. You will configure, migrate, and validate NGFW environments with a emphasis on Palo Alto technologies and related Cisco platforms.

You’ll develop detailed migration plans, coordinate cutovers, and ensure post-deployment validation across enterprise networks, while contributing to documentation and knowledge transfer for customer teams.