Senior Firewall & SSE Security Engineer

Job Description Resources 1 Experience 8+ years preferred Certification Firewall / network-security certification required Primary Focus Palo Alto NGFW/Panorama/SSE, Fortinet and Cisco ASA/Firepower

Role Summary Senior network security engineer responsible for firewall and Secure Service Edge implementation, migration, policy transformation and production cutover across Palo Alto Networks, Fortinet and Cisco technologies. Key Responsibilities / Implementation Scope

• Design, configure, migrate and troubleshoot enterprise firewall services across Palo Alto Networks, Fortinet and Cisco firewall platforms.
• Implement and support Palo Alto Networks NGFW platforms including PA-5450 and PA-3220, with security zones, interfaces, routing, NAT, security policy and threat-prevention profiles.
• Configure and operate Panorama for centralized policy, object, template/device-group and firewall management.
• Support Fortinet FortiGate firewalls, including OT firewall requirements and industrial/segmented network use cases where applicable.
• Support legacy Cisco ASA and Cisco Firepower / Secure Firewall environments during migration and replacement activities, including VPN appliance functions where present.
• Support Palo Alto SSE / Prisma Access / GlobalProtect components where required for remote-user and secure-access connectivity.
• Build and migrate firewall policies, NAT/PAT rules, objects, zones, security profiles and networksegmentation controls.
• Configure and troubleshoot site-to-site IPsec VPNs, remote-access dependencies, routing through firewalls and failover/high-availability behavior.
• Perform rule-base analysis, cleanup, optimization and validation while maintaining business connectivity and change-control requirements.
• Troubleshoot application flows using session/browser tools, packet captures, firewall logs and routing/NAT analysis.
• Execute firewall cutovers/migrations with pre-checks, validation, rollback support, issue resolution and hypercare.
• Prepare implementation runbooks, policy migration workbooks, test scripts, rollback plans and as-built documentation. Required

Technical Skills Area Required Hands-on Experience Palo Alto NGFW PA-5450, PA-3220, PAN-OS, zones, interfaces, routing, NAT, security policy,threat prevention and SSL/TLS inspection. Panorama Centralized firewall management, device groups, templates/template stacks, objects, policy deployment and operational troubleshooting. Palo Alto SSE / Remote Access Palo Alto SSE, Prisma Access and GlobalProtect architecture/operations whescope. Fortinet FortiGate policy, routing, NAT, VPN, segmentation and OT firewall use cases Cisco Firewall Cisco ASA and Cisco Firepower / Secure Firewall; legacy support, migration appliance functions. VPN / Segmentation IPsec VPN, remote-access dependencies, network segmentation, zone-baseand high-availability/failover concepts. Troubleshooting / Migration Session analysis, logs, packet capture, NAT/routing analysis, rule-base cleanvendor firewall migration and production cutover. Certification

Requirements Mandatory: At least one relevant firewall/network-security certification is required (for example PCNSE, Cisco CCNP Security, or an appropriate current Fortinet professional-level credential). Preferred / Advantageous: Additional Palo Alto, Cisco Secure Firewall/Firepower or Fortinet specialist certifications and multi-vendor firewall migration experience. Required Deliverables

• Firewall policy/NAT/object migration workbook
• Implementation runbooks and MOPs
• Firewall/SSE cutover and rollback plans
• Connectivity, security-policy and failover test scripts

• As-built configuration, rule-base documentation and operational handover