We are seeking a highly skilled Senior Perimeter Network Engineer with deep expertise in Palo Alto Networks firewalls to design, implement, manage, and optimize our perimeter security infrastructure. This role will be responsible for securing enterprise network boundaries, leading firewall architecture initiatives, and ensuring high availability, performance, and compliance across all edge security environments.
The ideal candidate is a hands-on technical leader with strong experience in next-generation firewall technologies, threat prevention, and enterprise-scale network security design.
Key Responsibilities
Firewall Architecture & Engineering
- Design, deploy, and maintain Palo Alto Networks NGFWs (physical and virtual).
- Lead architecture and configuration of:
- Security zones and segmentation
- NAT policies
- Security policies
- App-ID, User-ID, and Content-ID
- GlobalProtect VPN
- Implement and manage Panorama for centralized firewall management.
- Architect and maintain high-availability (HA) firewall clusters.
- Manage multi-site and hybrid cloud perimeter environments including Azure and GCP.
Security & Threat Prevention
- Configure and optimize:
- IPS/IDS
- URL Filtering
- WildFire
- DNS Security
- SSL decryption
- Monitor and respond to security alerts and firewall-related incidents.
- Perform firewall rule reviews, audits, and optimization.
- Support vulnerability remediation and compliance initiatives.
Network Operations & Optimization
- Ensure high availability and performance of perimeter security infrastructure.
- Conduct capacity planning and performance tuning.
- Troubleshoot complex network and firewall issues.
- Collaborate with NOC/SOC teams for incident resolution.
- Maintain documentation of architecture, policies, and procedures.
Compliance & Governance
- Participate in security assessments and audits.
- Ensure adherence to security best practices and standards.
Leadership & Collaboration
- Serve as technical SME for perimeter security.
- Mentor junior engineers.
- Partner with cloud, infrastructure, and security teams on new initiatives.
- Lead firewall migration and upgrade projects.
Required Qualifications
- 7+ years of network engineering experience.
- 5+ years of hands-on experience with Palo Alto Networks firewalls.
- Strong experience with:
- Panorama
- GlobalProtect VPN
- IPSec and SSL VPNs
- BGP, OSPF, and routing fundamentals
- Network segmentation and zero-trust design
- Deep understanding of:
- TCP/IP
- NAT
- VLANs
- DNS/DHCP
- SSL/TLS
- Experience managing high-availability firewall deployments.
- Strong troubleshooting skills in complex enterprise environments.
Preferred Qualifications
- Palo Alto certifications (PCNSE preferred).
- Experience with cloud firewalls (VM-Series).
- Experience with Prisma Access or SASE solutions.
- Automation experience (Python, Ansible, REST APIs).
- Experience with SIEM integrations (Splunk, Sentinel, etc.).
- Experience in large enterprise or multi-data center environments
Soft Skills
- Strong communication skills (technical and non-technical audiences).
- Ability to lead technical initiatives independently.
- Strong documentation and process discipline.
- Analytical mindset with strong problem-solving skills.
Education
- Bachelor’s degree in Computer Science, Information Systems, or related field (or equivalent experience).
As part of our selection process, external candidates may be required to attend an in-person interview with a VERSANT Media employee at one of our locations prior to a hiring decision. VERSANT Media's policy is to provide equal employment opportunities to all applicants and employees without regard to race, color, religion, creed, gender, gender identity or expression, age, national origin or ancestry, citizenship, disability, sexual orientation, marital status, pregnancy, veteran status, membership in the uniformed services, genetic information, or any other basis protected by applicable law.
If you are a qualified individual with a disability or a disabled veteran and require support throughout the application and/or recruitment process as a result of your disability, you have the right to request a reasonable accommodation. You can submit your request to candidateaccessibility@versantmedia.com.
VERSANT Media is committed to fair and equitable compensation practices. We include a good faith pay range for each position to comply with applicable state and local pay transparency laws and to promote equity across our organization. Actual compensation will be based on factors such as the candidate's skills, qualifications, experience, and location and may include additional forms of compensation and benefits such as health insurance, retirement plans, paid time off, etc.
VERSANT Media is not accepting unsolicited assistance from search firms for this employment opportunity. All resumes submitted by search firms to any employee at VERSANT via-email, the Internet, or in any form and/or method without a valid written Statement of Work in place for this position from VERSANT's Talent Acquisition team will be deemed the sole property of VERSANT. No fee will be paid in the event the candidate is hired by VERSANT as a result of the referral or through other means.