Senior Palo Alto NGFW Security Engineer (Expert)

Navitas Partners, LLC; San Francisco (CA); On-site; USD 150,000 - 190,000; Full time

Job summary

Navitas Partners, LLC is seeking a Palo Alto Networks Security Engineer at an expert level in the San Francisco Bay Area. The role focuses on assessing security architectures, migrating to Next Generation Firewalls, and optimizing threat-prevention configurations.

You will configure Palo Alto devices, Panorama, and related security services while coordinating complex migrations. The ideal candidate brings a minimum of 10 years of hands‑on experience with Palo Alto Networks technologies in large

Qualifications

• Minimum 10 years of expert‑level hands‑on experience with Palo Alto Networks technologies in large enterprise environments.
• Minimum 10 years of experience conducting enterprise cybersecurity assessments, including firewall architecture reviews, policy evaluations, threat‑prevention assessments, vulnerability identification, risk analysis, and remediation.
• Proven experience planning and executing large‑scale firewall migrations involving multiple firewalls in a program or project.
• Minimum 10 years of experience implementing security best practices and centralized monitoring, alerting, dashboards and reporting.
• Minimum 3 years of experience with ATP, Prisma Access, Prisma Cloud and related security services.

Responsibilities

• Conduct comprehensive assessments of existing and proposed Palo Alto Networks security architectures.
• Evaluate NGFW configurations, Panorama management, security policies, and threat-prevention capabilities.
• Review ATP configurations and validate alignment with best practices.
• Assess firewall interfaces, security zones, routing, and high-availability architecture.
• Identify gaps, vulnerabilities, and operational risks; develop remediation plans and document recommendations.
• Develop migration strategies and implementation plans for NGFW environments; perform configuration cleanup and cutsovers.
• Configure firewalls, Panorama, security services, policies, and migrate configurations to NGFW.
• Implement network segmentation, routing rules, and HA; develop testing and validation plans.
• Provide technical advisory services, troubleshooting, and post‑migration support.
• Develop and maintain documentation; conduct knowledge-transfer sessions; prepare training materials.

Skills

Palo Alto Networks

NGFW architecture

Panorama

Threat prevention

Security assessments

Firewall migrations

Prisma Access

Prisma Cloud

Strata Cloud Manager

Strata Logging Service

Tools

Panorama

Strata Cloud Manager

Strata Logging Service

Prisma Access

Prisma Cloud

Job description

Navitas Partners, LLC is seeking a Palo Alto Networks Security Engineer at an expert level in the San Francisco Bay Area. The role focuses on assessing security architectures, migrating to Next Generation Firewalls, and optimizing threat-prevention configurations.

You will configure Palo Alto devices, Panorama, and related security services while coordinating complex migrations. The ideal candidate brings a minimum of 10 years of hands‑on experience with Palo Alto Networks technologies in large