Senior Firewall Engineer

Betway Global; Johannesburg; On-site; ZAR 700,000 - 1,200,000; Full time

Job summary

Betway in Johannesburg is seeking an experienced Firewall Administrator to manage and optimize enterprise firewalls. You will configure Palo Alto and Cisco ASA devices, review security policies, and perform upgrades and high-availability testing.

You will also implement VPN/NAT/routing strategies, support Cloudflare WAF, and contribute to SASE and cloud security initiatives while collaborating with engineering and security teams to remediate incidents.

Qualifications

• 7+ years of hands-on experience in network security or firewall engineering.
• Strong, proven experience administering Palo Alto Networks firewalls and Cisco ASA firewalls.
• Solid experience with IPSec VPN tunnels, NAT, and policy-based routing.
• Strong understanding of networking fundamentals: TCP/IP, routing (static, BGP, OSPF), VLANs, and subnetting.
• Working knowledge of SASE solutions, particularly Palo Alto Prisma Access.
• Experience supporting a WAF, including Cloudflare, and application-layer security on firewalls.
• Strong troubleshooting skills, including packet captures and log analysis.
• Clear written and verbal communication, and the ability to work independently.

Responsibilities

• Manage, support, and maintain firewalls in production environments.
• Create, review, and optimize security policies following least-privilege principles.
• Perform firmware and OS upgrades, patching, and HA failover testing.
• Implement new firewalls where required and monitor health, performance, and logs.
• Investigate security events and collaborate with application teams on remediation.
• Support audits and compliance requirements with evidence and reports.
• Mentor junior engineers and act as escalation point for complex issues.

Skills

Firewall Admin

Palo Alto

Cisco ASA

VPN/IPSec

NAT & Routing

SASE

WAF

Troubleshooting

Communication

Tools

Palo Alto Panorama

Cisco FMC/FTD

Cloudflare

Job description

Kick-start your career in the online gaming world and experience the very latest in technology and innovation.

Firewall Administration and Support

• Manage, support, and maintain Palo Alto Networks (Panorama and standalone) and Cisco ASA firewalls in production environments
• Create, review, and optimize security policies, following least-privilege principles and cleaning up redundant or overly permissive rules
• Perform firmware and OS upgrades, patching, and high-availability (HA) failover testing
• Implement new firewalls where required.
• Monitor firewall health, performance, and logs, and troubleshoot connectivity and traffic-flow issues
• Manage change requests, including risk assessment, implementation, and rollback planning

VPN, NAT, and Routing

• Build, troubleshoot, and maintain site-to-site IPSec VPN tunnels (IKEv1/IKEv2) with partners, vendors, and cloud providers
• Configure and manage NAT (static, dynamic, PAT, and policy-based NAT) across platforms
• Implement and support policy-based routing and related traffic-steering functions
• Support remote access VPN, including GlobalProtect and Cisco AnyConnect SASE and Cloud Security

SASE and Cloud Security

• Support and administer Palo Alto Prisma Access, including remote networks, mobile users, and policy alignment with on-prem firewalls
• Contribute to the adoption and evolution of SASE and zero-trust architectures

Web Application Firewall (WAF)

• Manage and tune Cloudflare WAF rules, rate limiting, bot management, and custom rulesets
• Configure and support WAF and threat-prevention features on the firewalls (e.g., URL filtering, IPS, and application-layer controls)
• Investigate false positives and security events, and work with application teams on remediation

Security, Documentation, and Collaboration

• Respond to security incidents involving firewall or perimeter controls
• Support audits and compliance requirements with evidence, rule reviews, and configuration reports
• Maintain accurate network diagrams, runbooks, and standards documentation
• Mentor junior engineers and act as an escalation point for complex issues

Required Qualifications

• 7+ years of hands-on experience in network security or firewall engineering
• Strong, proven experience administering Palo Alto Networks firewalls and Cisco ASA firewalls
• Solid experience with IPSec VPN tunnels, NAT, and policy-based routing
• Strong understanding of networking fundamentals: TCP/IP, routing (static, BGP, OSPF), VLANs, and subnetting
• Working knowledge of SASE solutions, particularly Palo Alto Prisma Access
• Experience supporting a WAF, including Cloudflare, and application-layer security on firewalls
• Strong troubleshooting skills, including packet captures and log analysis
• Clear written and verbal communication, and the ability to work independently

Preferred Qualifications

• A relevant certification, such as: Palo Alto Networks Certified Network Security Engineer (PCNSE) Cisco CCNP Security or CCIE Security
• Experience with Panorama, Strata Cloud Manager, or Cisco FMC/FTD
• Familiarity with cloud networking (AWS, Azure, or GCP) and cloud-native firewalls
• Experience with automation or scripting (Python, Ansible, Terraform, or APIs) for firewall management
• Knowledge of zero-trust principles, SD-WAN, and frameworks such as NIST or ISO 27001

Please note we will apply relevance to our Talent Management and Talent Development Programme as part of our recruitment process. Shortlisted candidates may need to complete an assessment. This position requires trust and honesty it has access to customers financial details - therefore a credit and criminal record check will be conducted. The qualifications identified herein are an inherent job requirement; therefore, a qualification verification check will be done. By applying for this role, and supplying the necessary details, you hereby grant us permission to apply for these checks. This will be done in a confidential manner, and solely for the purposes of verification. Should you not hear from us within 2 weeks, please deem your application as unsuccessful.

The perfect place to work, play and grow! Our journey started in 1999 with a handful of brilliant individuals and some very big picture thinking. Now, we are an ever-growing community of 1,000+ talented and exceptional people at the forefront of the vast and competitive world. Betway has become ingrained in African soil, having set down early roots in markets such as Ghana and South Africa. From there, Betway has weaved its way across the landscape, incorporating regions in East, West and Southern Africa. This growth also shows no signs of slowing, as Betway continues to be embraced by fans of sports betting in more and more African regions. Whether it’s a career in banking and finance, marketing, development or customer care, our people cover a broad range of dedicated specializations, all under one Betway Africa roof.