Security Tool Engineer – Palo Alto

Position Overview
We are seeking an experienced Security Tool Engineer – Palo Alto to support the administration, engineering, troubleshooting, automation, and security of enterprise network and infrastructure platforms. The ideal candidate will have strong hands-on experience with Palo Alto Networks firewalls, Windows and RHEL/Linux infrastructure, enterprise networking, virtualization, backup/disaster recovery, scripting, and security hardening.

Responsibilities

• Plan, implement, administer, maintain, and troubleshoot enterprise infrastructure across Microsoft Windows Server, RHEL/Linux, virtualization, and network environments.
• Administer and troubleshoot Palo Alto Networks next-generation firewalls, including security policies, NAT, application controls, security profiles, interfaces, zones, virtual routers, VPNs, logging, and traffic monitoring.
• Review and troubleshoot blocked or denied traffic, connectivity, routing, application access, VPN, and firewall policy issues using logs, monitoring tools, packet captures, and other diagnostic tools.
• Support Palo Alto firewall upgrades, configuration changes, software/content updates, backups, maintenance, and change-management activities.
• Support firewall access requests and configuration changes following established security, least-privilege, and change-management practices.
• Collaborate with Network, Cybersecurity, Systems, Cloud, Application, and Service Desk teams to resolve complex infrastructure, firewall, and security issues.
• Troubleshoot LAN/WAN, TCP/IP, routing, DNS, DHCP, VPN, and application communication issues.
• Develop and maintain automation using Python, PowerShell, PowerCLI, BASH/Shell, Perl, JavaScript, and related technologies to support administration, configuration management, monitoring, reporting, patching, and troubleshooting.
• Perform command-line administration, Operations & Maintenance (O&M), configuration, and troubleshooting activities.
• Manage and troubleshoot enterprise backup and disaster recovery solutions, including Commvault Metallic, across physical, virtualized, and hybrid cloud environments.
• Monitor backup operations, investigate failures, perform recovery activities, and validate backup integrity and recoverability.
• Administer and support operating system updates, security patches, software deployments, and infrastructure upgrades while maintaining system availability, security, and compliance.
• Support security hardening, vulnerability remediation, configuration management, and compliance activities across Windows, Linux, virtualization, network, and security infrastructure.
• Maintain detailed documentation for system designs, configurations, firewall policies, network/security rules, procedures, troubleshooting activities, and configuration baselines.
• Analyze technical and implementation requirements, modify existing systems as needed, and develop technical specifications based on customer and operational requirements.
• Provide technical leadership and mentoring to junior team members.
• Participate in a 24/7/365 on-call rotation.

Basic Qualifications

• Bachelor's degree or higher in Computer Science, Computer Information Systems, Information Security, Information Technology, or a related field, or equivalent combination of education and experience.
• Approximately 8+ years of IT infrastructure, Information Security, or related experience.
• Current vendor or industry certification such as Palo Alto Networks, Microsoft Windows Server Hybrid Administrator, RHCE, VMware VCP-DCV, or equivalent/higher-level certification.
• Strong hands-on experience with Palo Alto Networks firewall administration and support.
• Strong knowledge of Windows and RHEL/Linux administration, Active Directory, Group Policy, DNS, DHCP, TCP/IP, IPv4/IPv6, PKI/Certificate Services, Ansible, server clustering, virtualization, and enterprise networking.
• Experience with firewall policy administration, NAT, VPNs, application controls, security profiles, network segmentation, logging, monitoring, and troubleshooting.
• Experience with backup and disaster recovery, preferably including Commvault or similar enterprise platforms.
• Strong scripting and automation skills using Python, PowerShell, PowerCLI, BASH/Shell, Perl, JavaScript, or similar technologies.
• Knowledge of security hardening and compliance standards, including CIS Controls, NIST SP 800-53 Rev. 5, and DISA STIGs.
• Ability to analyze complex infrastructure problems, identify root causes, develop solutions, and implement changes while minimizing operational impact.
• Strong problem-solving, communication, documentation, and collaboration skills.
• Ability to work independently and across cross-functional technical teams.
• U.S. Citizenship required. Security clearance: N/A.
• Ability to participate in a 24/7/365 on-call rotation.