Cybersecurity Firewall Analyst II

• Participate in implementation, support, and lifecycle management of Palo Alto SASE solutions (Prisma Access, GlobalProtect, Strata Cloud Manager) integrated with Inspection Zone technologies (F5 BIG-IP, SWG/Proxy).
• Design, deploy, and optimize cloud-delivered security controls including SWG, CASB, ZTNA, and threat prevention per Palo Alto SASE architecture.
• Provide advanced engineering support for SASE and Inspection Zone platforms in partnership with Security Operations, Network Engineering, and Incident Response.
• Drive monitoring, telemetry integration, and policy enforcement across SASE and on-prem environments for consistent visibility and detection.
• Execute system hardening, high availability design, failover strategy, and service continuity planning for SASE and Inspection Zone.
• Apply threat intelligence and best practices to proactively reduce risk.
• Continuously improve detection and response by leveraging SASE telemetry for incident analysis and threat hunting.
• Develop and report operational and security metrics to inform leadership and improve maturity.
• Collaborate to align SASE strategy with enterprise security architecture and modernization initiatives, including legacy proxy replacement.

• Hands-on engineering and lifecycle support of Palo Alto Networks solutions.
• Strong knowledge of network protocols including BGP, IPSec, routing, and NAT with SASE connectivity design.
• Experience with SASE platforms such as Prisma Access, GlobalProtect, and Strata Cloud Manager.
• Integration with on-prem Inspection Zone and hybrid cloud architectures, including F5 BIG-IP and SWG/Proxy.
• Collaboration with Security Operations, Network Engineering, and Incident Response.
• System hardening, high availability, and performance optimization.
• Security monitoring, telemetry integration, policy enforcement, and threat detection across SASE and on-prem environments.
• Preferred experience with automation and infrastructure-as-code such as Python or Terraform.
• Understanding of cybersecurity frameworks and practices such as NIST, CIS, and Zero Trust.
• Desired certifications include SANS GIACIAIHFA, CISSP, CISA, CISM, or related network/system security certifications.

Education Requirements:

• High School, Associate, Bachelor, Master, Bachelor of Science, or Bachelor of Arts in Cybersecurity, Information Security, Computer Science, Management Information Systems, or related field. Equivalent experience may substitute for a degree.
• 4+ years cybersecurity or IT-related experience, including information security or system administration roles. Additional 3+ years in cybersecurity or IT functions preferred.

Our client seeks a Cybersecurity Firewall Analyst II to engineer, support, and optimize Palo Alto SASE and related inspection zone technologies in a large enterprise. The role will implement and maintain Prisma Access, GlobalProtect, and Strata Cloud Manager while integrating with on-prem platforms such as F5 BIG-IP and secure web gateway solutions. The analyst will collaborate with Security Operations, Network Engineering, and Incident Response to enforce policy, enhance telemetry and monitoring, and strengthen threat detection. The position will drive high availability, hardening, and resilience, produce actionable metrics, and align SASE strategy with modernization initiatives and security architecture in a 24x7 CSOC environment.

Due to client requirements, applicants must be willing and able to work on a w2 basis. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.

Rate: $45.00 to $50.00/hr. w2, Skills, experience, and other compensable factors will be considered when determining pay rate. The pay range provided in this posting reflects a W2 hourly rate; other employment options may be available that may result in pay outside of the provided range.

W2 employees of Eliassen Group who are regularly scheduled to work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), dental, vision, pre-tax accounts, other voluntary benefits including life and disability insurance, 401(k) with match, and sick time if required by law in the worked-in state/locality. If anyone reaches out to you about an open position connected with Eliassen Group, please ensure that you are working directly with us by confirming the following:

When you work with Eliassen Group, all email communication will come from an Eliassen.com address, never Gmail, Yahoo, etc.

Eliassen Group is a strategic consulting firm that helps organizations reach further and achieve more through our technology, business advisory, and life sciences solutions. For nearly 40 years, we have combined exceptional people, deep domain expertise, and intelligent capabilities to expand our clients’ capacity and accelerate meaningful outcomes. We are driven by a purpose to positively impact the lives of our employees, clients, consultants, and the communities we serve.