Description

Design, implement, and manage Palo Alto Networks security infrastructure, including firewall policies, GlobalProtect VPN, and High Availability clusters.

This role is on-site.

Responsibilities

• Design and manage PAN-OS security policies, ensuring correct rule order, App-ID usage, and pre/post-rule implementation.
• Deploy and support GlobalProtect Remote Access VPN, configuring Portal/Gateway, Always-On, split/full tunneling, and HIP profiles.
• Integrate GlobalProtect authentication with SAML and MFA platforms like Azure AD, Okta, and Duo.
• Design, implement, and troubleshoot Site-to-Site IPsec VPNs using IKEv1/IKEv2, crypto profiles, and route-based configurations.
• Configure and maintain High Availability (HA) setups (Active/Passive and Active/Active), including link/path monitoring and failover testing.

Required Skills

• 10+ years of experience in network security engineering.
• Expertise in PAN-OS Security Policies, including rule optimization, cleanup, and logging best practices (Traffic, Threat, URL, HIP logs).
• Strong hands-on experience with GlobalProtect, Portal vs Gateway, and client troubleshooting.
• Solid understanding of IPsec VPN design, IKEv1 vs IKEv2, crypto profiles, and Proxy-ID vs route-based VPNs.
• Experience configuring HA interfaces, heartbeat, session synchronization, and state handling.
• Proficiency in monitoring and troubleshooting VPN tunnels using PAN-OS logs and diagnostic tools.
• Experience with Azure AD, Okta, and Duo for SAML and MFA integration.

Preferred Skills

• Exposure to Active/Active HA deployments and advanced HA state handling.
• Ability to provide root-cause analysis and documentation for firewall, VPN, and HA incidents.

Key Skills

Education

Any Graduate