MUST BE ABLE TO WORK ONSITE IN HAUPPAGUE, NY ON LONG ISLAND.
Our client is at the forefront of engineering and implementing leading-edge technological solutions to fuel growth, innovation and better customer service for government clients. We have been serving a variety of public and private sector businesses and organizations in efficient, effective digital transformation from design through development to maintenance. QnA Tech is looking to add to our security team that focuses on Palo Alto Strata Engineer. This position is onsite-Long Island Only.
We need a Palo certified engineer that can work 35 hours a week on site at Suffolk for Firewall management. This is going to be 6-12 month renewable contract.
Daily Tasks
Monitor firewall and Panorama system health (CPU, memory, sessions, interfaces)
Review system and threat logs for anomalies and critical alerts
Validate High Availability (HA) status and synchronization
Ensure successful log forwarding to SIEM/logging systems
Review and respond to service requests and incident tickets
Weekly Tasks
Analyze traffic trends, application usage, and bandwidth consumption
Review and tune firewall policies for optimization and security posture
Validate content and signature updates (Threat, Apps, WildFire, URL filtering)
Conduct rulebase hygiene (identify unused, redundant, or overly permissive rules)
Provide weekly operational reporting
Monthly Tasks
Perform comprehensive firewall health and performance review
Analyze threat trends and provide actionable recommendations
Validate licensing and subscription status
Review SSL decryption coverage and effectiveness
Update documentation (runbooks, diagrams, configurations)
Deliver monthly executive report and recommendations
As-Needed Tasks
Implement firewall policy changes and configuration updates
Support incident response and troubleshooting activities
Perform packet capture and deep traffic analysis
Participate in change management processes (CAB approvals)
Assist with audit requests and compliance validation
Provide recommendations for architecture improvements
11.2 Required Technical Experience
The assigned engineer must demonstrate the following minimum experience and qualifications:
Core Requirements
Minimum 5+ years of hands-on experience with Palo Alto Networks NGFW
Strong experience with Panorama centralized management
Deep knowledge of:
App-ID, User-ID, and Content-ID
Security policies and NAT configurations
Zone-based firewall architecture
Security & Threat Expertise
Experience analyzing:
Threat logs (malware, exploits, C2 traffic)
WildFire analysis and verdicts
DNS Security and URL filtering events
Understanding of:
Network security principles
Threat detection and response workflows
Networking & Troubleshooting
Strong understanding of:
TCP/IP, routing, switching, and VLANs
VPN technologies (IPSec and GlobalProtect)
Experience with:
Packet capture tools
CLI-based troubleshooting
Session-level traffic analysis
Operational & Process Experience
Experience working within:
Change management processes (CAB)
Incident management workflows
ITSM/ticketing systems
Ability to:
Document configurations and procedures
Produce operational and executive-level reports
Certifications (Preferred)
Palo Alto Networks Certified Network Security Engineer (PCNSE) - Preferred
Other relevant certifications (e.g., Security+, CISSP) - Beneficial
11.3 Soft Skills & Professional Requirements
Strong communication skills (technical and non-technical)
Ability to work independently and within a team environment
Strong analytical and problem-solving skills
Ability to prioritize tasks in a dynamic operational environment
Professional demeanor suitable for public sector engagement
Terms & Conditions for Candidate Portal
Last Updated: May 6th, 2026
Please read these Terms & Conditions ("Agreement", "Terms") carefully before using the Candidate Portal ("Portal", "Service") provided by AKT Corp ("we", "us", "our").
By accessing or registering for the Portal, you ("Candidate", "User", "you", "your") agree to be bound by these Terms.
If you do not agree with any part of these Terms, you may not use the Portal.
By accessing or using the Candidate Portal, you affirm that you are at least 18 years old and are legally authorized to enter into this Agreement.
If you are accessing the Portal on behalf of an employer or third party, you represent that you have the authority to bind that entity to these Terms.
The Portal is provided as a digital platform for Candidates to:
These Terms govern your use of the Portal and all related services.
You understand and agree that:
You agree to use the Portal in compliance with:
Prohibited actions include, but are not limited to:
You acknowledge that:
Your use of the Portal is subject to our Privacy Policy, which describes how we collect, use, and safeguard your personal information.
By using the Portal, you consent to the collection and use of information as described.
All intellectual property contained in or presented through the Portal is owned by us or our licensors.
You may not copy, modify, distribute, or otherwise use any Portal content without express written permission.
The Portal and all content and services are provided "as is" and "as available."
We make no warranties, express or implied, including:
To the fullest extent permitted by law, we are not liable for:
We may modify these Terms at any time.
Changes will be posted on the Portal with an updated "Last Updated" date.
Your continued use of the Portal after changes indicates your acceptance.
We may suspend or terminate your access to the Portal if you violate these Terms or for any reason, with or without notice.
Palo certified engineer, Suffolk for Firewall
| Location | Palo Alto, CA |
Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.
Free resume templatesImprove your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.
Free resume builder