LA- Palo Alto Global Protect

Job Title: Senior Palo Alto GlobalProtect Engineer (L3)
Experience
68 Years
Job Summary

#LI-SY4

We are seeking a Senior GlobalProtect Engineer to provide L3 support and technical leadership for Palo Alto GlobalProtect and Next Generation Firewall environments. The role involves advanced troubleshooting platform administration solution design support major incident resolution upgrades and continuous improvement of the enterprise remote access infrastructure.
Key Responsibilities

. Provide L3 support for Palo Alto GlobalProtect infrastructure in large enterprise environments.
. Design configure and administer GlobalProtect Portal Gateway HIP Profiles and VPN infrastructure.
. Troubleshoot complex VPN connectivity routing authentication certificate and performance issues.
. Configure and maintain Palo Alto Next Generation Firewalls Security Policies NAT Policies and GlobalProtect configurations.
. Integrate GlobalProtect with Active Directory LDAP RADIUS SAML MFA and certificate based authentication.
. Perform PAN OS upgrades GlobalProtect client upgrades firmware maintenance and patch management.
. Configure and troubleshoot High Availability (HA) Gateway failover and disaster recovery solutions.
. Analyze packet captures firewall logs and traffic flows using Wireshark and Palo Alto diagnostic tools.
. Optimize VPN performance split tunneling HIP policies and security configurations.
. Support change implementation release activities and production deployments.
. Lead root cause analysis (RCA) for major incidents and implement permanent corrective actions.
. Develop automation scripts using PowerShell or Python for operational efficiency.
. Mentor L1/L2 engineers and provide technical guidance during incident resolution.
. Create architecture documentation operational runbooks and knowledge articles.

Required Skills

. 68 years of hands on experience with Palo Alto GlobalProtect and NGFW.
. Strong expertise in GlobalProtect Portal Gateway HIP checks Always On VPN and Split Tunnel configurations.
. Advanced knowledge of PAN OS administration and Panorama.
. Strong understanding of TCP/IP BGP OSPF NAT DNS SSL/IPSec VPN and enterprise networking.
. Experience with SAML LDAP RADIUS Active Directory MFA and certificate based authentication.
. Experience troubleshooting complex VPN routing firewall and endpoint connectivity issues.
. Knowledge of Prisma Access Zero Trust architecture and cloud based remote access solutions is highly desirable.
. Experience performing packet analysis using Wireshark or tcpdump.
. Working knowledge of PowerShell or Python automation.
. Experience in ITIL environments including incident problem and change management.
. PCNSA or PCNSE certification is preferred.

• Palo Alto
• VPN (Virtual Private Network)
• Active Directory
• Firewalls
• Network Security

Together as owners lets turn meaningful insights into action.

Life at CGI is rooted in ownership teamwork respect and belonging. Here youll reach your full potential because

You are invited to be an owner from day 1 as we work together to bring our Dream to life. Thats why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our companys strategy and direction.

Your work creates value. Youll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas embrace new opportunities and benefit from expansive industry and technology expertise.

Youll shape your career by joining a company built to grow and last. Youll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.

That same commitment to fairness extends to how we use technology. To support our recruitment team AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals.

Come join our teamone of the largest IT and business consulting services firms in the world.