Sr. Firewall Engineer (Palo Alto / Prisma Access)

About the role

We are seeking a Sr. Network Security Engineer with deep expertise in Palo Alto Networks and Prisma Access (GlobalProtect). The ideal candidate will bring 5+ years of expert-level experience designing, implementing, and operating enterprise network security solutions across complex hybrid environments. This individual will architect, deploy, and support secure network solutions across RealPage's global infrastructure, including on-premises data centers, multi-cloud environments, VMware NSX platforms, and remote corporate and customer locations.

Responsibilities

• Manage and act as subject matter expert (SME) for Palo Alto Firewalls (PA5450, 5250, 450, AIRS VM NGFW) and management platform (Panorama 11.2+, Prisma, GlobalProtect, Log Collectors) — focus on improvements and automation.
• Engineer solutions utilizing Cisco Nexus (9500, 9300, 7K), Cisco 4000’s, 2600’s, 4500’s, F5 (LTM, GTM, AFM, ASM, APM), AWS, or GCP stack.
• Configure, monitor, and troubleshoot network platforms, including routing, BGP, SDWAN, IPSEC, and NSX configurations.
• Perform in-depth application assessments and document changes required to onboard applications into RealPage systems.
• Identify operational weaknesses within the existing network infrastructure and present execution plans to address concerns cost-efficiently.
• Evaluate and identify opportunities to improve the security and/or performance of existing environments.
• Provide escalation support during outages and customer issues, collaborating with cross-functional teams.
• Interact directly with technical and non-technical customers/vendors to resolve incidents and manage project tasks.
• Complete assigned projects on time, within specifications, and on budget, utilizing all available resources.
• Actively monitor and react to real-time network conditions, recommending improvements for monitoring and reporting.
• Implement and enforce security measures and policies to protect RealPage and client networks from external and internal threats.
• Travel may be required to meet project objectives (approximately <5% travel).

Requirements

• 5+ years of expert-level experience with Palo Alto Firewalls (on-prem and NGFW in cloud), including Panorama, GlobalProtect, and Prisma.
• Experience working with GitHub repositories and Terraform code for CI/CD deployments.
• 5+ years of hands-on expertise with Cisco and F5 systems, AWS, or GCP.
• 10 years of progressive network engineering experience in enterprise and data-center environments.
• In-depth knowledge and experience with switched and routed networks and associated protocols: SDWAN, BGP, OSPF, TCP/IP, NAT/PAT, HSRP, VRRP, STP, PBR.
• Ability to work as a member of a cross-functional team and document solutions using Visio, Lucidchart, Word, and PowerPoint.
• Excellent written and verbal communication skills, with the ability to effectively interact with clients, management, and peers.
• Ability to work an on-call rotation.

Preferred Qualifications

• Palo Alto Engineering and Deployment experience.
• Experience with Akamai CDN Edge and WAF, including troubleshooting client issues in the UI.
• Hands-on experience with AWS and Google Cloud architectures.
• Experience with load balancers and network automation tools such as Ansible or Python.
• Application stack knowledge (layers 3-7).
• Positive attitude with a passion for learning new technologies.

Pay

USD $105,800.00 - USD $180,200.00 per year.