Palo Alto Security Engineer

About the role

You will configure Panorama, write and tune firewall policy, and migrate existing rule bases onto Palo Alto platforms in AWS and Azure. You will also build and support SASE services through Prisma Access and GlobalProtect. This is a hands-on engineering role. You will be in the consoles and the CLI daily.

What you'll do

• Panorama configuration and platform management Build and maintain Panorama templates, template stacks, and device groups across client estates
• Structure pre-rules and post-rules so inheritance behaves predictably as device groups grow
• Run commit and push workflows, including partial commits and config audits before change windows
• Manage log collectors, log forwarding profiles, and retention design
• Schedule and validate dynamic content updates for applications, threats, and WildFire

What you need

• Firewalls
• Azure
• AWS
• Terraform
• Ansible
• Routing and switching

Good to have

• Git
• DLP