Third Line Firewall Engineer - Palo Alto and Panorama for NATO with security clearance

A multinational defence organisation runs next generation firewalls at enterprise scale and needs a third line engineer for them. Two things sit at the centre of the job: keeping the platform healthy, and keeping the policy on it correct.

What you would be doing

• Building, implementing, maintaining and supporting next generation firewalls, centrally administered.
• Implementing and verifying firewall policy and rule sets, and reviewing them so they stay defensible over time.
• Providing third line support on infrastructure and operational faults, working with the teams who raised them.
• Working alongside infrastructure management and the other security teams.
• Helping incident handlers identify and remediate what they are dealing with.
• Reviewing security documentation and giving technical advice when it is asked for.

• At least three years in cyber security or a closely related field.
• Three years or more with Palo Alto Networks firewalls and Panorama in enterprise deployments, plus firewall work from other vendors.
• Scripting with Bash, Python and Ansible.
• Network protocols and traffic analysis, TCP/IP services, LAN and WAN architecture, and the vulnerabilities of modern operating systems and applications.
• Working knowledge of Unix-like operating systems.
• A relevant certification such as CISM, CISSP or GIAC.
• Communication that survives contact with a mixed audience - engineers, managers, boards.