Network Security Engineer Palo Alto / Cisco FTD

We are looking for an experienced Network Security Engineer with strong hands-on expertise in Palo Alto and Cisco firewall technologies. The ideal candidate will be responsible for firewall design, implementation, configuration, migration, and advanced troubleshooting across on-premises and Microsoft Azure environments.

The candidate should have practical experience managing enterprise firewall platforms, implementing security policies, configuring VPN connectivity, and supporting complex network security environments., * Configure, manage, and troubleshoot Palo Alto firewalls using PAN-OS, Panorama, and Strata Cloud Manager.

• Configure and manage Cisco Firepower Threat Defense (FTD) firewalls using Firepower Management Center (FMC).
• Implement and maintain firewall security policies, NAT, IPSec VPN, and High Availability (HA).
• Perform firewall migrations, configuration validation, cutovers, and post-migration support.
• Support cloud-hosted Palo Alto and Cisco firewall deployments within Microsoft Azure.
• Work with Azure Virtual Networks (VNet), Virtual WAN (vWAN), and User Defined Routes (UDR).
• Configure and troubleshoot BGP routing and network connectivity issues.
• Perform advanced troubleshooting of firewall and network security incidents.
• Support Prisma Access environments as required.

• Strong hands-on experience with Palo Alto firewalls and PAN-OS.
• Experience with Panorama and Strata Cloud Manager.
• Hands-on experience with Cisco FTD and Firepower Management Center (FMC).
• Strong understanding of IPSec VPN configuration and troubleshooting.
• Experience with High Availability (HA), BGP, and NAT.
• Expertise in firewall security policies and rule management.
• Experience with firewall migration and implementation activities.
• Understanding of Azure networking concepts, including VNet, vWAN, and UDR.

Preferred Skills

• Experience with Prisma Access.
• Experience supporting cloud-hosted Palo Alto and Cisco firewalls in Azure.
• Experience working in enterprise network security environments.

Work Authorization / Engagement

W2 candidates only; no 1099, no C2C, and no third-party vendor submissions.

Candidates who are currently on a transferable work authorization and are willing/eligible to transfer their visa/work authorization to the company W2 are welcome.