Security Tool Engineer – Palo Alto

Security Tool Engineer – Palo Alto

Position Overview

We are seeking an experienced Security Tool Engineer – Palo Alto to support the administration, engineering, troubleshooting, automation, and security of enterprise network and infrastructure platforms. The ideal candidate will have strong hands-on experience with Palo Alto Networks firewalls, Windows and RHEL/Linux infrastructure, enterprise networking, virtualization, backup/disaster recovery, scripting, and security hardening.

Responsibilities

Plan, implement, administer, maintain, and troubleshoot enterprise infrastructure across Microsoft Windows Server, RHEL/Linux, virtualization, and network environments.

Administer and troubleshoot Palo Alto Networks next-generation firewalls, including security policies, NAT, application controls, security profiles, interfaces, zones, virtual routers, VPNs, logging, and traffic monitoring.

Review and troubleshoot blocked or denied traffic, connectivity, routing, application access, VPN, and firewall policy issues using logs, monitoring tools, packet captures, and other diagnostic tools.

Support Palo Alto firewall upgrades, configuration changes, software/content updates, backups, maintenance, and change-management activities.

Support firewall access requests and configuration changes following established security, least-privilege, and change-management practices.

Collaborate with Network, Cybersecurity, Systems, Cloud, Application, and Service Desk teams to resolve complex infrastructure, firewall, and security issues.

Troubleshoot LAN/WAN, TCP/IP, routing, DNS, DHCP, VPN, and application communication issues.

Develop and maintain automation using Python, PowerShell, PowerCLI, BASH/Shell, Perl, JavaScript, and related technologies to support administration, configuration management, monitoring, reporting, patching, and troubleshooting.

Perform command-line administration, Operations & Maintenance (O&M), configuration, and troubleshooting activities.

Manage and troubleshoot enterprise backup and disaster recovery solutions, including Commvault Metallic, across physical, virtualized, and hybrid cloud environments.

Monitor backup operations, investigate failures, perform recovery activities, and validate backup integrity and recoverability.

Administer and support operating system updates, security patches, software deployments, and infrastructure upgrades while maintaining system availability, security, and compliance.

Support security hardening, vulnerability remediation, configuration management, and compliance activities across Windows, Linux, virtualization, network, and security infrastructure.

Maintain detailed documentation for system designs, configurations, firewall policies, network/security rules, procedures, troubleshooting activities, and configuration baselines.

Analyze technical and implementation requirements, modify existing systems as needed, and develop technical specifications based on customer and operational requirements.

Provide technical leadership and mentoring to junior team members.

Participate in a 24/7/365 on-call rotation.

Basic Qualifications

Bachelor's degree or higher in Computer Science, Computer Information Systems, Information Security, Information Technology, or a related field, or equivalent combination of education and experience.

Approximately 8+ years of IT infrastructure, Information Security, or related experience.

Current vendor or industry certification such as Palo Alto Networks, Microsoft Windows Server Hybrid Administrator, RHCE, VMware VCP-DCV, or equivalent/higher-level certification.

Strong hands-on experience with Palo Alto Networks firewall administration and support.

Strong knowledge of Windows and RHEL/Linux administration, Active Directory, Group Policy, DNS, DHCP, TCP/IP, IPv4/IPv6, PKI/Certificate Services, Ansible, server clustering, virtualization, and enterprise networking.

Experience with firewall policy administration, NAT, VPNs, application controls, security profiles, network segmentation, logging, monitoring, and troubleshooting.

Experience with backup and disaster recovery, preferably including Commvault or similar enterprise platforms.

Strong scripting and automation skills using Python, PowerShell, PowerCLI, BASH/Shell, Perl, JavaScript, or similar technologies.

Knowledge of security hardening and compliance standards, including CIS Controls, NIST SP 800-53 Rev. 5, and DISA STIGs.

Ability to analyze complex infrastructure problems, identify root causes, develop solutions, and implement changes while minimizing operational impact.

Strong problem-solving, communication, documentation, and collaboration skills.

Ability to work independently and across cross-functional technical teams.

U.S. Citizenship required. Security clearance: N/A.

Ability to participate in a 24/7/365 on-call rotation.

Pay Range

$130,000—$150,000 USD