> Markdown version of [/jobs/ext/3690460-palo-alto-firewall-admin-sme](https://www.wearedevelopers.com/jobs/ext/3690460-palo-alto-firewall-admin-sme). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Palo Alto Firewall Admin SME

- **Company:** TEKSYSTEMS INC.
- **Location:** Charlotte, NC, United States (Remote available)
- **Salary:** $124,800.0 - $145,600.0
- **Contract:** Temporary contract
- **Skills:** Spyware, Antivirus Softwares, User Authentication, Configuration Management, Network Address Translation, Identity and Access Management, Internet Protocol Security (IP SEC), Intrusion Detection and Prevention, Virtual Private Networks (VPN), Network Layer, Routing, Packet Analyzer, Zero Trust Network Access, Virtual Local Area Networks, Dynamic Routing, Transport Layer Security, Firewalls (Computer Science)
- **Published:** October 11, 2026
- **Apply:** https://dejobs.org/x/x/C1F2075172B840B094CC8EDF8B8FE1AD/job/

## About the Role

* Must be able to work on W-2 in the United States without sponsorship (i.e. - Citizen , GC Holder, H4 EAD, etc)
 * PaloAlto firewall monitoring
 * Zero Trust (Prefered Zscaler)
 * Proven expertise troubleshooting tickets (understanding of IAM, correct processes)
 * NAT - Source/destination NAT, policy matching, translations, and troubleshooting.
 * PBF - Policy-Based Forwarding behavior and how it can override the expected routing-table path.
 * Routing - Static/dynamic routing, virtual routers, route selection, next-hop troubleshooting, and asymmetric paths.
 * Interfaces / Zones - Layer 3 interfaces, subinterfaces, VLANs, zones, and interface-level troubleshooting.
 * VPN / IPsec - IKE/IPsec configuration, tunnel interfaces, routing, and tunnel troubleshooting.
 * For a Secure Access candidate, we'd still expect enough NAT/PBF/routing knowledge to troubleshoot through those functions and recognize when one is causing the problem.

## Description

2 - SSL Decryption - Forward Proxy, decryption policies/profiles, certificates, exclusions, and troubleshooting application failures.

3 - URL Filtering - URL categories, custom categories, policy actions, exceptions, and troubleshooting.

4 - Security Profiles / Threat Prevention - Antivirus, Anti-Spyware, Vulnerability Protection, WildFire, File Blocking, and profile-based enforcement.

5 - Traffic & Session Troubleshooting - Logs, session analysis, end reasons, policy matching, packet captures, and understanding the complete flow through a Palo Alto.

6 - User-ID - User/group mappings, identity awareness, and identity-based security policy.

7 - Panorama - Centralized policy/configuration management, commits/pushes, and managed firewall troubleshooting.

8 - GlobalProtect - Portals/gateways, authentication, access policy, and client/session troubleshooting.