Sr. Palo Alto Engineer

Position: Sr. Palo Alto Engineer

Location: Honolulu, Hawaii(Onsite 2 weeks then remote)

Hiring Mode: 6+ Months Contract

Job Description:

Work on customer engagement in Hawaii (remote and onsite) to include the following tasks:

• Collect current-state configurations from Panorama, PA5220s edge and HA pairs, including VPN/GlobalProtect components
• Review routing, interfaces, zones, VRs and any multi-vsys in scope
• Confirm target PAN-OS alignment considerations with Panorama and establish migration plan and rollback approach
• Draft cut-over plan and validation checklist per data center
• Create LLDs documenting the target configuration on PA5520 HA pairs
• Define GlobalProtect/VPN service continuity plan on the PA5220s and site-to-stie VPN
• Product Acceptance Test Plan and develop detailed Methods of Procedure (MOPs) for each data center cutover in scope.
• Build and stage target configuration
• Migrate and consolidate configuration, validating parity with current-state behavior
• Validate GlobalProtect and site-to-site VPN service post-cutover and confirm HA failover

Requirements

• 5-10 years of experience implementing Palo Alto NGFW firewalls
• Strong hands-on expertise in enterprise networking (routers, switches, firewalls) and routing protocols , and Palo Alto NGFW feature adoption and best practices
• Experience in large-scale NGFW migrations, including developing Low Level Designs (LLDs), Acceptance Test Plans and Methods of Procedure for cutover support.
• Experience in GlobalProtect VPN and site-to-site VPN development and migration
• Experience developing security policies, UTM traffic rules, and access controls in NGFW
• Experience developing application ID and custom App ID