Palo Alto Firewall L3 Engineer (AWS Security)

Palo Alto Firewall L3 Engineer (AWS Security)

Location:Marysville Ohio
Experience:8 Years

Duration: Full Time

Role Summary

Seeking an experienced Palo Alto Firewall L3 Engineerwith strong expertise in firewall architecture design implementation and operations. The candidate will serve as the L3 SME for Palo Alto security infrastructure and AWS native security services supporting complex deployments security enhancements and enterprise-scale firewall operations.

Candidate should be a US Citizen (Holding valid US Passport)

Key Responsibilities

Design & Implementation

Lead firewall design planning and implementation activities for new deployments migrations and technology refresh projects.

• Develop High-Level Design (HLD) Low-Level Design (LLD) and security architecture documentation.
• Design network segmentation DMZ VPN and Zero Trust security solutions.
• Implement Palo Alto NGFW Panorama GlobalProtect IPSec VPN SSL Decryption Threat Prevention and WildFire solutions.

Operations & Engineering

Manage Palo Alto firewalls Panorama security policies NAT VPNs HA clustering and threat prevention services.

• Perform advanced troubleshooting for firewall routing VPN and application connectivity issues.
• Conduct firewall rule reviews policy optimisation recertification and compliance assessments.
• Lead firewall upgrades migrations vulnerability remediation and infrastructure changes.
• Provide L3 escalation support for critical incidents and perform Root Cause Analysis (RCA).

AWS Security

Manage AWS Security Groups Network ACLs AWS Network Firewall WAF GuardDuty Security Hub IAM CloudTrail and AWS Config.

• Support secure hybrid-cloud connectivity and cloud security governance.

Required Skills

Palo Alto NGFW Panorama GlobalProtect

• App-ID User-ID WildFire Threat Prevention URL Filtering
• IPSec VPN SSL VPN NAT HA Clustering
• Firewall Design Deployment Migration & Security Architecture
• BGP OSPF TCP/IP DNS
• AWS Security Services
• SIEM Integration (Microsoft Sentinel Splunk QRadar)
• Strong Incident Change & Problem Management experience

Preferred Experience

Large enterprise firewall environments (100 firewalls)

• Design and implementation of global firewall infrastructure
• Hybrid Cloud Security (AWS)
• Firewall automation using Python Terraform or Ansible
• Managed Security Services (24x7 Operations)

Areas of responsibility

Monitoring and Incident Detection-Analyse attack trends and correlate logs across systems to identify advance threats. Enhance monitoring processes and implement improvements for faster detection to ensure compliance with security frameworks and regulatory standards.

Incident Handling and Analysis-Perform root cause analysis create incident response plans and implement disaster recovery measures to minimize business disruption

Threat Assessment and Analytics-Undertake forensic analysis using advanced analytics tools and implement mitigation measures to align with compliance requirements.

Stakeholder Coordination and Audit Assistance-Liaise with cross functional teams external vendors and auditors to ensure compliance with security frameworks.

Maintain audit documentation and ensure its accuracy while implementing processes that support audit readiness and continuous compliance.

Training and Awareness-Assist in creating and delivering cybersecurity awareness sessions including guidance on phishing and malicious emails.