Senior Palo Alto Firewall Engineer - NGFW & PAN-OS Expert

REALIGN LLC; Sunnyvale (CA); On-site; USD 120,000 - 180,000; Full time

Job summary

REALIGN LLC in Sunnyvale, CA is seeking an experienced Network Palo Alto Firewall Engineer to design, deploy, and support enterprise security infrastructure using Palo Alto Networks firewalls and PAN-OS. You will configure security policies, NAT, VPNs, and centralized management with Panorama, and collaborate with cross-functional teams to ensure Zero Trust security and reliable network operations.

Strong troubleshooting and logging skills are essential, with hands-on experience in

Qualifications

• Extensive hands-on experience with Palo Alto firewalls and PAN-OS.
• Experience with Panorama for centralized firewall management.
• Strong knowledge of security policies, NAT, ACLs, zones, virtual routers, and interfaces.
• Experience with App-ID, User-ID, Content-ID, URL Filtering, Threat Prevention, and WildFire.
• Experience with IPSec VPN, GlobalProtect, and site-to-site VPNs.
• Strong TCP/IP, DNS, DHCP, VLANs, subnetting, and network security knowledge.
• Experience with BGP, OSPF, and static routing.
• HA Active/Passive and Active/Active configurations.
• Zero Trust principles awareness.

Responsibilities

• Design, deploy, configure, and maintain Palo Alto firewall infrastructure.
• Configure and manage firewall security policies, NAT, routing, zones, and interfaces.
• Manage Palo Alto devices through Panorama and centralized configuration changes.
• Configure and troubleshoot GlobalProtect, IPSec VPN, SSL decryption, and remote-access solutions.
• Implement firewall policies based on applications, users, devices, and security requirements.
• Monitor firewall health, traffic and security events.
• Troubleshoot connectivity, application access, routing and policy issues.
• Perform upgrades, patches, migrations, and configuration reviews.
• Implement and maintain High Availability configurations.
• Analyze traffic and security logs; perform packet-level troubleshooting when needed.
• Collaborate with network, security, cloud, and infrastructure teams to resolve issues.
• Develop and maintain network security documentation, diagrams, procedures.
• Participate in security assessments, incident response, and infrastructure improvement.
• Support enterprise network segmentation and Zero Trust initiatives.

Skills

Palo Alto firewalls

PAN-OS

Panorama

Security policies

NAT

ACLs

VLANs

OSPF

BGP

TLS inspection

IPSec VPN

GlobalProtect

Troubleshooting

Zero Trust

Tools

Panorama

Splunk

Python

Ansible

REST APIs

Terraform

AWS

Azure

Job description

REALIGN LLC in Sunnyvale, CA is seeking an experienced Network Palo Alto Firewall Engineer to design, deploy, and support enterprise security infrastructure using Palo Alto Networks firewalls and PAN-OS. You will configure security policies, NAT, VPNs, and centralized management with Panorama, and collaborate with cross-functional teams to ensure Zero Trust security and reliable network operations.

Strong troubleshooting and logging skills are essential, with hands-on experience in