Note: The job is a remote job and is open to candidates in USA. CloudIQ Technologies provides cloud computing solutions, including migration, systems integration, application development, and infrastructure management for enterprises. The company is seeking a Palo Alto Network Security Engineer to design, implement, maintain, and support Palo Alto Networks security infrastructure in AWS, while protecting organizational data, systems, and networks from cyber threats.
Responsibilities
- Understand Architectural Notes and deploy Palo Alto NGFW in AWS (VM-Series)
- Configure firewall policies, NAT, VPNs, and routing to meet security and compliance requirements
- Integrate NGFW with AWS native services (VPC, Transit Gateway, ELB, Auto Scaling, etc.)
- Experience handling PANAMA
- Develop automation scripts (Terraform, Ansible) for firewall deployment and configuration
- Implement Infrastructure-as-Code (IaC) for repeatable, scalable firewall provisioning
- Build automation for ongoing operational tasks such as policy updates, health checks, and scaling
- Monitor, troubleshoot, and optimize Palo Alto NGFW performance in AWS
- Manage security logging, monitoring, and integration with SIEM tools
- Ensure compliance with enterprise cloud security standards
- Manage firewall configurations, templates, and device groups through Panorama
- Automate policy push and updates across multiple NGFW instances
- Implement centralized logging, monitoring, and compliance reporting
- Design, deploy, configure, and maintain Palo Alto Networks next-generation firewalls (NGFWs), including physical and virtual appliances (VM-Series)
- Develop, implement, and manage security policies, application filtering, URL filtering, and threat prevention profiles (Anti-Spyware, Anti-Virus, Vulnerability Protection)
- Utilize Panorama for the centralized management of firewalls, policy deployment, and software/content updates
- Proactively monitor and respond to security alerts from WildFire, Threat Prevention, and other security services. Analyze traffic and logs to identify and mitigate potential threats
- Configure and manage GlobalProtect VPN solutions, including site-to-site VPNs and remote access for end-users, ensuring secure and reliable connectivity
- Act as a key resource for troubleshooting complex network and security issues. Participate in incident response activities, including investigation, containment, and remediation of security events
- Monitor the health and performance of the Palo Alto infrastructure, performing regular maintenance, software upgrades, and hardware refreshes as needed
- Create and maintain comprehensive documentation for network security architecture, configurations, policies, and procedures
- Work closely with the networking, systems administration, and application teams to ensure security is integrated into all aspects of the IT infrastructure
- Keep up to date with the latest cybersecurity trends, threats, and Palo Alto Networks features and best practices
Skills
- Experience: 3-5+ years of hands-on experience with Palo Alto Networks firewalls and Panorama in an enterprise environment
- In-depth knowledge of Palo Alto Networks NGFW features, including App-ID, User-ID, Content-ID, and SSL Decryption
- Strong understanding of core networking concepts, including TCP/IP, DNS, DHCP, routing (BGP, OSPF), and switching
- Experience with VPN technologies (IPSec, SSL)
- Proficient in network traffic analysis and troubleshooting using tools like Wireshark and packet captures
- Strong analytical and problem-solving skills with the ability to diagnose and resolve complex technical issues under pressure
- Excellent written and verbal communication skills, with the ability to explain complex technical concepts to both technical and non-technical audiences
- Certifications: Palo Alto Networks Certified Network Security Engineer (PCNSE) is highly preferred
- Other relevant certifications such as CISSP, CCNA/CCNP Security are a plus
- Experience with Prisma Access (SASE) or securing cloud environments (AWS) additional knowledge on Azure and GCP are welcome, but AWS is a must, with Palo Alto VM-Series firewalls
- Experience with scripting languages (e.g., Python, Ansible) for automating security tasks and configurations
- Familiarity with Cortex XDR or other endpoint detection and response (EDR) solutions
- Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field
Company Overview
Company H1B Sponsorship