[Remote] Senior Network Engineer

Note: The job is a remote job and is open to candidates in USA. CBTS is hiring a Senior Network Firewall Engineer to support a large-scale migration from Cisco AnyConnect to Palo Alto Prisma Access (GlobalProtect). The role leads hands-on VPN engineering and develops automation to make migration tasks repeatable, while setting technical standards and resolving complex issues.

Responsibilities

• Design, configure, and support Palo Alto Prisma Access and GlobalProtect VPN services
• Lead the technical execution of the phased migration of users and groups from Cisco AnyConnect to Palo Alto
• Design and develop Python and/or PowerShell automation for migration tasks, such as user and group onboarding, policy and configuration builds, validation checks, and reporting
• Automate recurring engineering tasks to reduce manual effort and errors
• Set standards for code quality, testing, and version control on the team’s automation
• Serve as an escalation point for complex connectivity, authentication, and policy issues
• Maintain firewall policies, security profiles, and configuration standards
• Mentor junior engineers and review their scripts and configurations
• Document designs, runbooks, and automation so the team can reuse them
• Partner with network, security, and service desk teams, and report on migration progress to stakeholders

Skills

• 7+ years of experience in network or firewall engineering
• Deep hands-on experience with Palo Alto Networks firewalls (Panorama, GlobalProtect, or Prisma Access)
• Working knowledge of Cisco AnyConnect or ASA/FTD VPN
• Proficiency in Python and/or PowerShell, with a record of building automation used in production
• Strong understanding of TCP/IP, routing, NAT, SSL/IPsec VPN, and network security fundamentals
• Experience with REST APIs and scripting against network or security platforms
• Strong troubleshooting and written communication skills
• Palo Alto certification (PCNSE preferred)
• Experience leading large-scale VPN or remote access migrations
• Familiarity with SAML/SSO, MFA, and identity integrations (Azure AD/Entra ID, Okta)
• Experience with Git, CI/CD, or infrastructure-as-code practices
• Prior experience in an enterprise or managed services environment

Benefits

• Fully virtual position.

Company Overview

CBTS provides end-to-end IT and communications solutions that allow businesses to improve efficiency, enable innovation, and mitigate risk. It was founded in 1994, and is headquartered in Cincinnati, Ohio, USA, with a workforce of 1001-5000 employees. Its website is https://www.cbts.com.

Company H1B Sponsorship

CBTS has a track record of offering H1B sponsorships, with 1 in 2020. Please note that this does not guarantee sponsorship for this specific role.