> Markdown version of [/jobs/ext/4654404-senior-network-engineer-squid-proxy-palo-alto-security](https://www.wearedevelopers.com/jobs/ext/4654404-senior-network-engineer-squid-proxy-palo-alto-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Network Engineer (Squid Proxy & Palo Alto Security)

- **Company:** CBS Butler Limited
- **Location:** Sevenoaks, United Kingdom (Remote available)
- **Experience:** Expert
- **Salary:** £16,640
- **Contract:** Temporary to permanent
- **Skills:** Proxy Servers, User Authentication, Network Analysis, Complex Networks, Cyber Security, System Configuration, Dynamic Host Configuration Protocol, Network Address Translation, Domain Name System (DNS), Intrusion Detection and Prevention, Python (Programming Language), Routing, Network Segmentation, Packet Analyzer, Remote Access Technology, Ansible, Zero Trust Network Access, Squid (Proxy Server), TCP/IP, Tcpdump, Wireshark, Virtual Local Area Networks, Software Vulnerability Management, Transport Layer Security, Grafana, Firewalls (Computer Science), Infrastructure Automation Frameworks, SolarWinds (Software), Palo Alto Networks, Splunk
- **Published:** November 10, 2026
- **Apply:** https://www.hiredonline.co.uk/jobs/225814239-senior-network-engineer-squid-proxy-palo-alto-security/cbsbutler-holdings-limited-trading-as-cbsbutler

## About the Role

* 5+ years' experience supporting enterprise network infrastructure.
 * Strong hands-on administration and support experience with Palo Alto Networks firewalls.
 * Demonstrable experience configuring and managing Palo Alto App-ID security policies.
 * Extensive experience with Squid Proxy, including ACLs, SSL inspection and authentication.
 * Experience with Palo Alto Panorama, User-ID, URL Filtering and Threat Prevention.
 * Strong understanding of TCP/IP, routing, VLANs, DNS, DHCP, NAT and VPN technologies.
 * Experience troubleshooting SSL/TLS, authentication and application connectivity issues.
 * Proficiency with network analysis tools such as Wireshark and tcpdump.
 * Experience working within highly secure, regulated or business-critical environments.

Desirable Experience

 * Experience within Defence, Government or Critical National Infrastructure (CNI).
 * Experience supporting secure customer environments.
 * Knowledge of network segmentation and Zero Trust security principles.
 * Experience with infrastructure automation using Python or Ansible.
 * Familiarity with monitoring platforms such as Splunk, SolarWinds, ELK or Grafana.

If you have strong hands-on experience with Squid Proxy and Palo Alto firewalls, particularly App-ID and application-aware security policy management, we would be keen to hear from you.

## Description

We are seeking an experienced Network Architect / Senior Network Engineer with strong hands-on expertise in Squid Proxy, Palo Alto Next-Generation Firewalls (NGFW) and App-ID technologies to support and enhance secure enterprise network infrastructure., * Design, implement, configure and support enterprise Squid Proxy environments, including forward, reverse and transparent proxy deployments.

 * Administer and optimise Palo Alto Next-Generation Firewalls, including Panorama management.
 * Develop and maintain granular firewall security policies using Palo Alto App-ID, User-ID and Content-ID technologies.
 * Configure and manage URL filtering, Threat Prevention, WildFire, GlobalProtect and SSL decryption.
 * Manage proxy ACLs, authentication integrations, SSL inspection and web filtering policies.
 * Review and optimise firewall rule bases, transitioning legacy port-based rules towards application-aware security policies.
 * Troubleshoot complex network and application connectivity issues across Layers 2-7.
 * Perform packet analysis using tools such as Wireshark and tcpdump.
 * Support firewall and proxy upgrades, migrations, patching and high-availability configurations.
 * Work alongside Cyber Security teams to support vulnerability remediation, incident investigations and security compliance activities.