Description

Role Overview:

This role is centered on managing and securing enterprise network environments, with a primary focus on Palo Alto Next-Generation Firewalls (NGFW). The successful candidate will be responsible for configuring, deploying, and administering Palo Alto ecosystem components, alongside designing and implementing critical SSL/TLS decryption strategies to ensure robust security and compliance.

Key Responsibilities:

• Configure, deploy, and manage Palo Alto Next-Generation Firewalls (NGFW).
• Implement and maintain security policies, NAT, VPNs (IPSec/SSL), and high availability configurations.
• Perform rule base optimization, firewall audits, and policy standardization.
• Troubleshoot connectivity and security-related issues across enterprise environments.
• Manage and support Palo Alto ecosystem components including Panorama (centralized management), GlobalProtect (remote access VPN), and WildFire (advanced threat detection).
• Configure application-aware and user-based policies (App-ID, User-ID).
• Apply URL filtering, anti-malware, and threat prevention profiles.
• Handle firmware upgrades, patches, and device lifecycle management.
• Design and implement SSL/TLS decryption strategies (inbound and outbound).
• Configure forward proxy and inbound inspection for encrypted traffic.
• Manage certificates, PKI infrastructure, and trust chains for decryption deployment.
• Monitor decrypted traffic for threats while maintaining privacy and compliance.
• Troubleshoot SSL decryption failures, certificate issues, and application compatibility.
• Ensure compliance with security policies and regulatory requirements during decryption.

Required Skills:

• Hands-on experience with Palo Alto Firewalls (PA Series, Panorama).
• Hands-on experience with Firewall technologies (NGFW, IPS/IDS).
• Hands-on experience with SSL/TLS Decryption and certificate management.
• Strong knowledge of TCP/IP, DNS, HTTP/HTTPS protocols.
• Strong knowledge of Network routing and switching (BGP, OSPF).
• Strong knowledge of VPN technologies (IPSec, SSL VPN).
• Experience handling encrypted traffic inspection and security implications.
• Proficiency in Service Now.
• Strong analytical and troubleshooting skills.
• Effective communication and documentation abilities.
• Ability to work independently and in team environments.

Qualifications:

• 7 to 10 years of experience.
• STEM education preferred.
• Palo Alto Certifications (PCNSA, PCNSE) preferred.
• Other relevant certifications such as CCNA or CCNP Security preferred.

Preferred Skills:

• Experience with cloud security (AWS, Azure, GCP) and firewall integrations.
• Automation using Python, Ansible, or APIs

Key Skills

Education

Any Graduate