Palo Alto Network Engineer (Palo Alto technologies; NAT/QoS; Wildfire; virtual routers; Panorama)

---

Job description

Palo Alto Network Engineer

Duration: thru 3/31/25 with extension

Location: Albany, NY 50% Telecommute 's discretion

Monday - Friday 8:30am-5:00pm with occasional weekend work as needed

One week of 24x7 on-call duties every 6-8 weeks after training period

Qualifications

Expert in the following Palo Alto technologies: app-ID, User-ID, URL filtering, Virtual Wire, high-availability, DNS security, SSL decryption (forward inspection and inbound), Wildfire, IPS, Zone/DoS/packet buffer protection.

Expert in creation of firewall rules for security, NAT, QoS, authentication, and decryption.

Expert in creation, application, and modification of profiles for antivirus, anti-spyware, vulnerability, URL filtering, File blocking, and WildFire.

Expert in the design and implementation of interfaces, zones, virtual routers, vsys, IPSec tunnels, and Global Protect gateways/portals.

Expert in the implementation and operation of Panorama, templates, template stacks, devices-groups, and log collectors.

Expert in the use of both Palo Alto web GUI and CLI.

Expert in the analysis of Palo Alto logs.

Proficient in Layer 3 routing; BGP, OSPF, and static. VRFs, route-maps, redistribution, NAT, and subnetting.

Proficient in switching using major vendor CLIs; Cisco, Arista, etc. Features including VLANs, trunking, VXLAN, MLAG, VPC, etc.

Proficient in Domain Name System (DNS).

Proficient in Microsoft Visio for documentation of network solutions.

Preferred experience with other firewalls/NGFW/IPS; Cisco ASA/FirePOWER, Netscreen, Fortinet, CheckPoint, Juniper SRX, Snort.

Certifications preferred; CCNA/CCNP, PCNSA/PCNSE, CISSP, Network+/Security+.

Responsibilities

Candidate must be able to plan and execute delegated project tasks with minimal supervision.

Serve as senior technical resource designing, deploying, and supporting Palo Alto firewalls.

Manage and lead in the orchestration of multi-discipline technologies for the resolution of complex problems; communicate with technology and business leaders for problem resolution and make recommendations for system enhancements as required.

Provide 24x7x365 on-call network support for advanced troubleshooting, escalation and ticket resolutions, on a rotating basis.

Provide in-depth analysis on network data captures using monitoring tools such as Zenoss, Splunk, Palo Alto Panorama, Arista Cloud Vision, NfSen, Ixia, Gigastor, Viavi Observer, Wireshark, WhatsUp Gold, etc.

Ensure that network availability is maximized by overseeing Change Control procedures, code upgrades, network monitoring, installations, moves and changes, and troubleshooting complex issues.

Oversee network monitoring to ensure maximum network availability.

Participate in network performance analysis, training, and capacity planning.

Proven ability to work independently and as a team member.

Proven ability to lead teams and develop network engineers.

Proven analytical, problem solving, organizational and time management skills.

Good communication (written and oral) and interpersonal skills.

Good organizational, multi-tasking, and time-management skills.

<!– job description page –>