Palo Alto Firewall Engineer

Job Title : Palo Alto Firewall Engineer

Location : Rosemead, CA

Hybrid role based in Rosemead, CA

On-site every Tuesday and Wednesday (or possibly one day per week)

Preference for candidates from the LA area or willing to relocate

Duration : 12 months with potential extension

Rate : $55 / hour

Job Description :

We are seeking a skilled and experienced Palo Alto Firewall Engineer to join our enterprise security team. The ideal candidate will be responsible for deploying, managing, and optimizing Palo Alto Networks firewalls across our organization's network infrastructure. This role involves ensuring the security, reliability, and high performance of our network perimeter and internal segmentation through advanced firewall management.

Key Responsibilities :

Firewall Policy Management :

Create, modify, and optimize firewall policies and rules.

Ensure firewall policies are aligned with the organization's security, compliance, and organizational standards.

Regularly review and update policies to address evolving threats and operational needs.

Firewall Deployment & Configuration :

Support the installation and configuration of Palo Alto firewalls, including models PA-850, PA-5220, and PA-3260.

Implement best practices for firewall rule sets, NAT rules, and security policies.

Support and troubleshoot existing firewall configurations.

Security & Network Monitoring :

Monitor network traffic to detect anomalies and security threats.

Use Panorama management platform to oversee multiple firewall instances.

Conduct security audits, vulnerability assessments, and performance tuning.

Firewall Optimization & Security Enhancements :

Ensure high availability, fault tolerance, and optimal firewall performance.

Implement security best practices, including VPN, IPS / IDS, and advanced threat prevention.

Integration & Automation :

Automate routine firewall management tasks where possible.

Develop scripts to streamline firewall policy updates or log analysis.

Documentation & Collaboration :

Maintain detailed documentation of firewalls, policies, and procedures.

Work closely with network, security, and infrastructure teams.

Support and assist in incident response, troubleshooting, and emergency security activities.

Supporting Large Enterprise Environment :

Support complex networking environments with MPLS, VRF, VPN, BGP, OSPF, and other routing protocols.

Deliver technical expertise in network security design and implementation.

Qualifications : Experience :

Minimum of 3-5 years managing Palo Alto security appliances and solutions in a large enterprise environment.

Proven experience with Palo Alto NGFW, Prisma Access, GlobalProtect, Panorama, SASE, and related security tools.

Certifications :

Palo Alto Networks Certifications (e.g., PCNSE) are a PLUS.

Other relevant security or networking certifications (CCNP Security, CISSP) are advantageous.

Technical Skills :

Deep understanding of network protocols : BGP, OSPF, VLANs, MPLS, VPN, NAT, TCP / IP.

Hands-on experience with firewall policy management, troubleshooting, and configuration.

Knowledge in network security best practices and threat prevention.

Experience working in a hybrid on-premises / cloud environment.

Strong scripting and automation skills for firewall policy management and monitoring.

Soft Skills :

Excellent problem-solving, communication, and teamwork skills.

Ability to work in a fast-paced, dynamic enterprise environment.

Willingness to work after-hours for emergency support, if necessary.

Preferred :

Experience with large enterprise security policies and compliance standards.

Willingness to relocate or existing residence in LA area.