Network Security Engineer - Palo Alto

Network Security Engineer – Palo Alto
 
Overview:
 
WEI is a service and solution technology provider that focuses on building quality relationships with clients. Our sales and engineering teams work closely with our clients to optimize their environments and work efficiently by using cutting-edge technologies and best practices. Our clients benefit from our technical talents, value-added services, demonstration labs, knowledge transfer center, integration/testing labs, proof of concept labs and commitment to quality. From solution design through implementation, our sales and technical team will remain focused on providing unwavering support throughout the project.
 
WEI is your strategic IT partner delivering custom, innovative business technology solutions that deliver real business outcomes.
 
WEI is seeking an experienced Network Security Engineer, that will be project-focused, working both independently and with a team. This candidate will be primarily focused on Palo Alto design and implementation and should be familiar with and have experience with each of the features listed below. Ideally this candidate has a broad skill set within the security space and flexible enough to learn and implement complementary solutions.  
 
 
What You'll Do:

• Conversion and configuration of firewall security policies
  • Local, SCM and Panorama managed
• Design and configuration of layer 3 for NGFW and Prisma Access
  • Interfaces
  • Routing – Static, BGP, OSPF
  • Tunnels – GRE, IPSec
  • Remote access – Client, Clientless, Prisma
• Design and configuration of security profiles
  • Anti – virus | spyware - DNS Security
  • Vulnerability
  • Data filtering
  • URL Filtering - Header insertion, tenant restrictions
• Troubleshooting of NGFW and Prisma Access infrastructure
• Assessments of NGFW and Prisma Access infrastructure
• Documentation of NGFW and Prisma Access infrastructure

 
 
What You'll Need:

• Panorama
• URL filtering
• IPS
• User-ID
• App-ID 
• BGP and OSPF routing in PAN-OS
• Inspection of SSL encrypted traffic.
• VM-Series / Physical PA400 up to PA7500
• Expedition
• HA clustering.
• Large enterprise environment 100+ firewalls
• Packet capture analysis and troubleshooting
• Thorough understanding of TCP/IP and the OSI model
• PCNSE certification preferred.
• Global Protect / Prisma SASE
• Prisma Access / Prisma SD-WAN
• SD-WAN / IPSEC site to site

 
Experience:

• Panorama/PAN-OS: 5 years
• Strata Cloud Manager /Prisma Access: 3 years
• BGP and OSPF routing in PAN-OS: 5 years
• Inspection of SSL encrypted traffic: 5 years.
• Palo Alto NGFW/Panorama in a large (100+ firewalls) environment: 5 years
• Understanding of TCP/IP and the OSI model: 5 years
• Ideally (not required), experience with Palo Alto's cloud-based IoT services for NGFWs and managing NGFWs through Strata Cloud Manager.

 
Education and/or Certifications:
 
Bachelor's degree in computer related degree
 
 
EEOC Statement:
 
WEI is an Equal Opportunity Employer: The Company believes that all persons are entitled to equal employment opportunity. The Company will not discriminate or tolerate discrimination against any employee or applicant because of race, color, creed, religion, genetic information, sex, sexual orientation, national origin, age, status with regard to public assistance, marital or veteran status, disability or any other characteristic protected by local, state or federal law.