Senior Firewall Engineer

Betway Africa; Johannesburg; On-site; ZAR 900,000 - 1,200,000; Full time

Job summary

Betway Africa in Johannesburg is seeking a seasoned Firewall Administrator to join our security team. You will manage Palo Alto Networks and Cisco ASA firewalls in production, optimize policies, perform upgrades, and deploy new firewalls while ensuring high availability and adherence to least-privilege principles.

You will also handle VPNs (IPSec, site-to-site), NAT, SASE Prisma Access, Cloudflare WAF, and threat prevention features, while documenting runbooks and supporting audits.

Qualifications

• 7+ years of hands-on experience in network security or firewall engineering.
• Strong, proven experience administering Palo Alto Networks firewalls and Cisco ASA firewalls.
• Solid experience with IPSec VPN tunnels, NAT, and policy-based routing.
• Strong understanding of networking fundamentals: TCP/IP, routing (static, BGP, OSPF), VLANs, and subnetting.
• Working knowledge of SASE solutions, particularly Palo Alto Prisma Access.
• Experience supporting a WAF, including Cloudflare, and application-layer security on firewalls.
• Strong troubleshooting skills, including packet captures and log analysis.
• Clear written and verbal communication, and the ability to work independently.

Responsibilities

• Manage, support, and maintain Palo Alto Networks firewalls in production environments
• Create, review, and optimize security policies, following least-privilege principles and cleaning up redundant or overly permissive rules
• Perform firmware and OS upgrades, patching, and high-availability (HA) failover testing
• Implement new firewalls where required.
• Monitor firewall health, performance, and logs, and troubleshoot connectivity and traffic-flow issues
• Manage change requests, including risk assessment, implementation, and rollback planning
• Respond to security incidents involving firewall or perimeter controls
• Support audits and compliance requirements with evidence, rule reviews, and configuration reports
• Maintain accurate network diagrams, runbooks, and standards documentation
• Mentor junior engineers and act as an escalation point for complex issues

Skills

Firewall engineering

Palo Alto Networks

Cisco ASA

IPSec VPN

NAT & routing

SASE/Prisma Access

WAF management

Troubleshooting & logs

Independent work

Education

PCNSE

CCNP Security

CCIE Security

Bachelor's degree in IT/CS

Tools

Palo Alto Panorama

Palo Alto firewalls

Cisco ASA

Cloudflare WAF

GlobalProtect

Cisco AnyConnect

Prisma Access

Job description

Kick-start your career in the online gaming world and experience the very latest in technology and innovation.

Firewall Administration and Support

• Manage, support, and maintain Palo Alto Networks (Panorama and standalone) and Cisco ASA firewalls in production environments
• Create, review, and optimize security policies, following least-privilege principles and cleaning up redundant or overly permissive rules
• Perform firmware and OS upgrades, patching, and high-availability (HA) failover testing
• Implement new firewalls where required.
• Monitor firewall health, performance, and logs, and troubleshoot connectivity and traffic-flow issues
• Manage change requests, including risk assessment, implementation, and rollback planning

VPN, NAT, and Routing

• Build, troubleshoot, and maintain site-to-site IPSec VPN tunnels (IKEv1/IKEv2) with partners, vendors, and cloud providers
• Configure and manage NAT (static, dynamic, PAT, and policy-based NAT) across platforms
• Implement and support policy-based routing and related traffic-steering functions
• Support remote access VPN, including GlobalProtect and Cisco AnyConnect

SASE and Cloud Security

• Support and administer Palo Alto Prisma Access, including remote networks, mobile users, and policy alignment with on-prem firewalls
• Contribute to the adoption and evolution of SASE and zero-trust architectures

Web Application Firewall (WAF)

• Manage and tune Cloudflare WAF rules, rate limiting, bot management, and custom rulesets
• Configure and support WAF and threat-prevention features on the firewalls (e.g., URL filtering, IPS, and application-layer controls)
• Investigate false positives and security events, and work with application teams on remediation

Security, Documentation, and Collaboration

• Respond to security incidents involving firewall or perimeter controls
• Support audits and compliance requirements with evidence, rule reviews, and configuration reports
• Maintain accurate network diagrams, runbooks, and standards documentation
• Mentor junior engineers and act as an escalation point for complex issues

Required Qualifications

• 7+ years of hands-on experience in network security or firewall engineering
• Strong, proven experience administering Palo Alto Networks firewalls and Cisco ASA firewalls
• Solid experience with IPSec VPN tunnels, NAT, and policy-based routing
• Strong understanding of networking fundamentals: TCP/IP, routing (static, BGP, OSPF), VLANs, and subnetting
• Working knowledge of SASE solutions, particularly Palo Alto Prisma Access
• Experience supporting a WAF, including Cloudflare, and application-layer security on firewalls
• Strong troubleshooting skills, including packet captures and log analysis
• Clear written and verbal communication, and the ability to work independently

Preferred Qualifications

• A relevant certification, such as:
• Palo Alto Networks Certified Network Security Engineer (PCNSE)
• Cisco CCNP Security or CCIE Security
• Experience with Panorama, Strata Cloud Manager, or Cisco FMC/FTD
• Familiarity with cloud networking (AWS, Azure, or GCP) and cloud-native firewalls
• Experience with automation or scripting (Python, Ansible, Terraform, or APIs) for firewall management
• Knowledge of zero-trust principles, SD-WAN, and frameworks such as NIST or ISO 27001
• Please note we will apply relevance to our Talent Management and Talent Development Programme as part of our recruitment process.
• Shortlisted candidates may need to complete an assessment.

This position requires trust and honesty it has access to customers financial details - therefore a credit and criminal record check will be conducted. The qualifications identified herein are an inherent job requirement; therefore, a qualification verification check will be done. By applying for this role, and supplying the necessary details, you hereby grant us permission to apply for these checks. This will be done in a confidential manner, and solely for the purposes of verification.

Should you not hear from us within 2 weeks, please deem your application as unsuccessful.

The perfect place to work, play and grow!