Palo Alto Engineer
About the role
We are seeking a Senior Network Security Engineer to provide advanced-level services focused on deploying, optimizing, and supporting Palo Alto Networks security technologies. This role involves working with next-generation firewalls and cloud-delivered security solutions. This hybrid position requires in-office presence on Tuesday, Wednesday, and Thursday and can be based in Wayne, PA; Charlotte, NC; Dallas, TX; or Scottsdale, AZ.
Responsibilities
- Provide senior-level network security services, including installing, configuring, and integrating Palo Alto NGFW and Prisma Access (SASE) solutions.
- Lead the design, implementation, and optimization of Palo Alto firewall policies, including security rules, NAT, App-ID, User-ID, and threat prevention profiles.
- Participate in advanced security architecture and policy decisions, including firewall segmentation strategies and SASE design.
- Identify and implement automation opportunities using tools like APIs, Ansible, or Terraform to improve deployment efficiency.
- Provide advanced network and security troubleshooting, including deep packet analysis and log correlation using Palo Alto tools like Panorama and Cortex Data Lake.
- Collaborate with engineering and application teams to implement secure, scalable, and reliable solutions.
- Develop and maintain documentation, including firewall rule standards, security policies, and network diagrams.
- Mentor junior engineers and support knowledge transfer on Palo Alto best practices and operations.
- Perform capacity planning, monitoring throughput, session limits, and scaling strategies for Palo Alto environments.
Requirements
- A minimum of 5 years of network or security engineering experience is necessary. Strong hands-on experience with Palo Alto Networks firewalls (NGFW) and Panorama is required. Experience with firewall migrations, rule optimization, and segmentation strategies is also needed.
- A working knowledge of scripting or automation (Python, Ansible, Terraform, or similar) is required. A strong understanding of networking concepts such as routing, switching, VPNs, and TCP/IP is essential.
- Experience with Prisma Access (SASE) or other cloud-delivered security platforms is strongly preferred.
- Proven ability to lead projects and drive security initiatives.
Qualifications
- An undergraduate degree in a related field or an equivalent combination of experience is required.
Skills
- A working knowledge of scripting or automation (Python, Ansible, Terraform, or similar) is required.
- A strong understanding of networking concepts such as routing, switching, VPNs, and TCP/IP is essential.
- Experience with Prisma Access (SASE) or other cloud-delivered security platforms is strongly preferred.
- Proven ability to lead projects and drive security initiatives.
Benefits
Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Everforth Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Everforth Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our ‘Welcome Packet’ as well, which an Everforth Apex team member can provide.