Cybersecurity Firewall Analyst III

Responsibilities

• Leads the technical strategy and methodology for reviewing and migrating Palo Alto Networks security policies to Prisma Access / SASE.
• Defines best-practice egress internet policy standards and target-state security policy architecture for the SASE environment.
• Performs advanced analysis of complex, multi-zone security policies, including inter-VRF and identity-based rule sets.
• Architects the policy migration approach, including rule disposition framework (migrate, consolidate, retire, rewrite) and migration sequencing.
• Serves as the technical escalation point for policy conflicts, edge cases, and architectural design questions.
• Collaborates with identity/ZTNA teams on the transfer of identity-based perimeter policies to Prisma Access.
• Develops standardized templates, processes, and quality criteria for the policy review and migration effort.
• Provides technical mentorship and guidance to Analyst I and Analyst II team members; reviews their work for accuracy and completeness.
• Engages with business stakeholders, IT leadership, and cross-functional teams to communicate progress, risks, and design decisions.
• Ensures all work adheres to change management processes, compliance requirements, and organizational security standards.
• Contributes to project planning, milestone tracking, and executive-level status reporting.
• Proactively identifies risks, gaps, and dependencies in the migration effort and recommends mitigation strategies.

Qualifications

• 5-8+ years of experience in firewall administration, network security engineering, or a senior cybersecurity role.
• Deep hands-on expertise with Palo Alto Networks next-generation firewalls, Panorama, and large-scale policy management.
• Experience with SASE/SSE platforms, specifically Palo Alto Prisma Access, strongly preferred.
• Demonstrated experience leading firewall policy optimization or migration projects in a large enterprise or critical infrastructure environment.
• Strong understanding of egress internet security architecture, including proxy, URL filtering, SSL decryption, and application-based policies.
• Expert-level knowledge of TCP/IP, network protocols, NAT, routing, and security architecture principles.
• Able to design and implement firewall policy frameworks that balance operational needs with security best practices.
• Palo Alto Networks PCNSE required; PCSAE or Prisma Certified Cloud Security Engineer a plus.
• Relevant industry certifications such as CISSP, CCNP Security, or equivalent preferred.
• Excellent written and verbal communication skills; able to present technical findings and recommendations to leadership.
• Experience mentoring or leading junior technical staff.
• Demonstrated commitment to personal and team success.

Pay

$60.00 - $69.00/hr; W2 contract, no PTO, no Benefits. ACA-compliant supplemental package available for enrollment.

Schedule

Hybrid

Benefits

N/A

Company Information

This is a 12-month contract with a potential for extension. Primary Talent Partners is an Equal Opportunity / Affirmative Action employer committed to diversity in the workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, age, national origin, disability, protected veteran status, gender identity, or any other factor protected by applicable federal, state, or local laws.