Senior Palo Alto Network Security Engineer

CONTEXT

In the ever-evolving landscape of cyber threats, robust and adaptable network security is non-negotiable, especially for institutions that underpin national infrastructure and public safety. Our client, a major player in its sector, is embarking on a strategic and critical transformation: migrating its core network security infrastructure from an legacy Forcepoint system to the cutting-edge Palo Alto Networks platform. This isn't merely a technical swap; it's a profound strategic enhancement designed to elevate their defensive posture, provide granular control, and enable deeper threat intelligence across their complex, multi-site environments. The challenge is immense, requiring meticulous planning, seamless execution, and the architectural foresight to future-proof their digital fortress. This role offers the unique opportunity to be at the heart of this transformation, shaping the very fabric of their network security and ensuring operational continuity and resilience against the most sophisticated cyber adversaries.

ACTIVITIES

• Lead the planning, design, and execution of the migration from Forcepoint to Palo Alto Networks firewalls and security platforms across multiple critical sites.
• Manage and maintain the existing Palo Alto Networks security infrastructure, including firewalls (PA-Series, VM-Series), Panorama, and other related security tools.
• Develop and implement advanced security policies, rules, and profiles (e.g., App-ID, Content-ID, Threat Prevention, URL Filtering, WildFire) to enforce robust security posture.
• Perform operational maintenance, including software upgrades, patch management, configuration backups, and system health monitoring.
• Contribute to the architectural evolution of the network security landscape, identifying opportunities for improvement, automation, and integration with other security systems.
• Provide expert-level troubleshooting and incident response support for network security issues, ensuring rapid resolution and minimal disruption.
• Collaborate closely with network architects, operations teams, and cybersecurity analysts to ensure seamless integration and alignment of security strategies.
• Create and maintain comprehensive documentation, including migration plans, network diagrams, configuration baselines, and operational procedures.
• Mentor and provide technical guidance to junior security engineers within the team.

EXPECTED ACHIEVEMENTS

• Successful and seamless migration of network security infrastructure from Forcepoint to Palo Alto Networks, meeting project timelines and security objectives.
• Establishment of a highly secure, high-performance, and resilient Palo Alto Networks environment across all critical multi-site locations.
• Significant enhancement of the client's network security posture, evidenced by improved threat detection, prevention capabilities, and compliance adherence.
• Streamlined operational processes for network security management, reducing manual effort and improving response times.
• Becoming a central figure in safeguarding national digital assets, directly impacting the ability of a vital public institution to operate securely and effectively.

ENVIRONMENT

Palo Alto Networks (Firewalls, Panorama, App-ID, Content-ID, Threat Prevention, WildFire, URL Filtering), Forcepoint (migration experience), Network protocols (TCP/IP, Routing, VPN), Multi-site network architectures, Cloud Security concepts, Scripting (Python, PowerShell) for automation, SIEM integration, Agile/ITIL methodologies, Incident Management.