Note: The job is a remote job and is open to candidates in USA. Dice is seeking a Network Engineer specializing in Palo Alto Firewalls for a remote position. The role involves engaging with customers in Hawaii to manage configurations and migrations related to Palo Alto NGFW firewalls and ensuring service continuity for VPNs.
Responsibilities
- Collect current-state configurations from Panorama, PA5220s edge and HA pairs, including VPN/GlobalProtect components
- Review routing, interfaces, zones, VRs and any multi-vsys in scope
- Confirm target PAN-OS alignment considerations with Panorama and establish migration plan and rollback approach
- Draft cut-over plan and validation checklist per data center
- Create LLDs documenting the target configuration on PA5520 HA pairs
- Define GlobalProtect/VPN service continuity plan on the PA5220s and site-to-stie VPN
- Product Acceptance Test Plan and develop detailed Methods of Procedure (MOPs) for each data center cutover in scope
- Build and stage target configuration
- Migrate and consolidate configuration, validating parity with current-state behavior
- Validate GlobalProtect and site-to-site VPN service post-cutover and confirm HA failover
Skills
- 5-10 years of experience implementing Palo Alto NGFW firewalls
- Strong hands-on expertise in enterprise networking (routers, switches, firewalls) and routing protocols, and Palo Alto NGFW feature adoption and best practices
- Experience in large-scale NGFW migrations, including developing Low Level Designs (LLDs), Acceptance Test Plans and Methods of Procedure for cutover support
- Experience in GlobalProtect VPN and site-to-site VPN development and migration
- Experience developing security policies, UTM traffic rules, and access controls in NGFW
- Experience developing application ID and custom App ID
- WEST COAST Candidates Preferred
- Should be willing to work in HAWAII Time
Company Overview
Company H1B Sponsorship