Firewall Engineer

We are seeking an experienced Senior Firewall Engineer to design, implement, and support enterprise network security solutions across a complex, multi-vendor environment. In this role, you will lead firewall deployment and migration initiatives, strengthen network security architecture, and help ensure the availability, performance, and integrity of critical infrastructure.

The ideal candidate brings hands-on expertise with Palo Alto Networks firewalls and Panorama, experience supporting Fortinet environments, and a strong foundation in enterprise networking technologies. Success in this role requires technical leadership, strong troubleshooting skills, and the ability to collaborate effectively with infrastructure, cloud, and application teams.

Experience supporting large-scale enterprise environments, particularly within the financial services industry, is highly valued. Responsibilities

• Design, implement, and maintain secure enterprise network infrastructures utilizing Palo Alto Networks, Fortinet, and Cisco networking technologies.
• Lead firewall migration projects, including policy assessment, configuration translation, testing, and deployment using migration tools such as Expedition, FortiConverter, SmartMove, and other vendor-supported solutions.
• Deploy and expand network security platforms in both new and existing enterprise environments.
• Review, optimize, and maintain firewall security policies, access controls, and threat prevention configurations to align with security standards and compliance requirements.
• Troubleshoot and resolve complex firewall, routing, switching, and network security issues across multi-vendor environments.
• Partner with network, cloud, infrastructure, and application teams to integrate security controls into enterprise architecture and operational processes.
• Develop and maintain technical documentation, including network diagrams, security standards, operational procedures, and configuration records.
• Monitor security events and incidents, support investigations, and contribute to remediation and root cause analysis activities.
• Participate in an on-call rotation to support critical security incidents and planned maintenance activities.
• Evaluate emerging security threats, vulnerabilities, and technologies and recommend improvements to strengthen the organization’s security posture., Join a team responsible for securing critical enterprise infrastructure at scale. You’ll have the opportunity to work with cutting-edge security technologies, lead impactful migration initiatives, and collaborate with highly skilled engineering teams to help protect and modernize enterprise network environments.

• 4+ years of Information Security Engineering experience, or equivalent demonstrated through a combination of work experience, military service, training, or education.
• 2+ years of hands-on experience in network security engineering with a focus on enterprise firewall technologies and secure network architecture.
• 2+ years of experience configuring, managing, and troubleshooting Palo Alto Networks firewall platforms.
• 2+ years of experience designing and implementing security policies, rule optimization, and firewall hardening across enterprise environments.
• 2+ years of hands-on experience with Palo Alto Panorama, including:
• Template stacks
• Device groups
• Policy hierarchy management
• Logging and reporting
• Custom dashboards
• Role-based access controls (RBAC)

Preferred Qualifications

• Experience supporting Fortinet firewall platforms and management tools.
• Knowledge of Cisco routing and switching technologies.
• Experience leading firewall transformation and migration initiatives in large enterprise environments.
• Familiarity with compliance-driven network security frameworks and industry best practices.
• Strong analytical, troubleshooting, and problem-solving skills.
• Experience working within large-scale financial services organizations., * Palo Alto Networks Firewalls
• Panorama Administration
• Firewall Migration Tools (Expedition, FortiConverter, SmartMove)
• Network Security Architecture
• Security Policy Management
• Threat Prevention Technologies
• Cisco Routing and Switching
• Incident Response & Troubleshooting
• Enterprise Infrastructure Security