Palo Alto Network Security Engineer

VMC Soft Technologies, Inc is seeking a Palo Alto Network Security Engineer to manage and secure network infrastructures. The role involves configuring and deploying Palo Alto firewalls, implementing security policies, and managing SSL decryption strategies.

Responsibilities:

• Configure| deploy| and manage Palo Alto Next-Generation Firewalls (NGFW)
• Implement and maintain security policies| NAT| VPNs (IPSecSSL)| and high availability configurations
• Perform rule base optimization| firewall audits| and policy standardization
• Troubleshoot connectivity and security-related issues across enterprise environments
• Manage and support Palo Alto ecosystem components including Panorama (centralized management), GlobalProtect (remote access VPN), WildFire (advanced threat detection)
• Configure application-aware and user-based policies (App-ID| User-ID)
• Apply URL filtering| anti-malware| and threat prevention profiles
• Handle firmware upgrades| patches| and device lifecycle management
• Design and implement SSLTLS decryption strategies (inbound and outbound)
• Configure forward proxy and inbound inspection for encrypted traffic
• Manage certificates| PKI infrastructure| and trust chains for decryption deployment
• Monitor decrypted traffic for threats while maintaining privacy and compliance
• Troubleshoot SSL decryption failures| certificate issues| and application compatibility
• Ensure compliance with security policies and regulatory requirements during decryption

Requirements:

• Hands-on experience with Palo Alto Firewalls (PA Series, Panorama)
• Hands-on experience with Firewall technologies (NGFW, IPS/IDS)
• Hands-on experience with SSL/TLS Decryption and certificate management
• Strong knowledge of TCP/IP, DNS, HTTP/HTTPS protocols
• Strong knowledge of Network routing and switching (BGP, OSPF)
• Strong knowledge of VPN technologies (IPSec, SSL VPN)
• Experience handling encrypted traffic inspection and security implications
• Proficiency in Service Now
• 7 to 10 years of experience
• Palo Alto Certifications PCNSA (Network Security Administrator)
• Palo Alto Certifications PCNSE (Network Security Engineer)
• CCNA
• CCNP Security
• Experience with cloud security (AWS Azure GCP) and firewall integrations is a plus
• Automation using Python, Ansible, or APIs
• STEM education preferred