Purpose of the Role :

We are seeking an experienced Firewall / Palo Alto Security Engineer to deliver perimeter security infrastructure and firewall policy separation as part of a large-scale corporate divestiture programme. The role is responsible for designing, building, and configuring Palo Alto firewalls at new PoP locations, migrating and separating security policies between entities, and ensuring a clean perimeter security posture ahead of Day 1.

Key Responsibilities :

- Design and deploy Palo Alto firewalls at new PoP locations

- Configure security zones, interfaces, and routing integration

- Build security policy rulebase covering internet egress, ingress, inter-zone traffic, and partner connectivity

- Configure NAT policies and implement threat prevention, URL filtering, and WildFire integration

- Manage Panorama device groups, template stacks, and RBAC

- Analyse and migrate existing firewall rulebases for entity separation

- Configure firewall rules for third-party and partner connectivity

- Deploy firewalls in high availability (HA) pairs

- Collaborate with core routing, Zscaler, and automation teams

Tech Stack :

- Palo Alto Networks (PA-3200, PA-5200, PA-400, VM-Series), Panorama

- Security Policy Design, NAT, Threat Prevention, SSL/TLS Decryption

- Networking : TCP/IP, BGP, OSPF, VPN (IPSec, GRE), GlobalProtect

- Automation : Python, Terraform, Git, GitHub, PAN-OS SDK

- Cloud Security : AWS, Azure, GCP

Requirements :

- 8-10 years of experience in network security

- Deep hands-on experience with Palo Alto NGFW and Panorama

- Strong understanding of firewall architecture, zone-based security, and migration strategies

- Experience with firewall-as-code and CI/CD pipelines

- PCNSE certification is desirable

- Ability to work in an Agile environment with Jira and Confluence