Job Description

MatchPoint Solutions is a fast-growing, young, energetic global IT-Engineering services company with clients across the US . We provide technology solutions to various clients like Uber, Robinhood, Netflix, Airbnb, Google, Sephora, and more! More recently, we have expanded to working internationally in Canada, China, Ireland, UK, Brazil, and India . Through our culture of innovation, we inspire, build, and deliver business results, from idea to outcome. We keep our clients on the cutting edge of the latest technologies and provide solutions by using industry-specific best practices and expertise.

We are excited to be continuously expanding our team. If you are interested in this position, please send over your updated resume. We look forward to hearing from you!

Job Title: Palo Alto Engineer


Remote


13 weeks


Rate: 90$-95$ per hour on W2

Senior Palo Alto Networks Engineer (NGFW & Prisma Security Lead)

We are seeking a Senior Palo Alto Networks Engineer with deep expertise in PAN-OS Next-Generation Firewalls and the broader Palo Alto Networks security portfolio, including Prisma Access and Prisma Cloud. This role will lead the design, deployment, and lifecycle management of enterprise firewall and cloud security solutions, serving as both a hands-on engineer and technical lead across security workstreams.

Key Responsibilities:

• Lead end-to-end design and deployment of Palo Alto Networks NGFW solutions across physical, virtual, and cloud-native form factors (PA-Series, VM-Series, CN-Series)
• Serve as technical lead for firewall and cloud security implementations, owning delivery from architecture through production rollout and steady-state operations
• Design and implement advanced NGFW security policies and capabilities, including:
  • App-ID, User-ID, Device-ID, and Content-ID policy frameworks
  • SSL/TLS decryption and certificate management strategies
  • Advanced Threat Prevention, WildFire, DNS Security, and URL Filtering
  • Vulnerability protection, anti-spyware, and file blocking profiles
  • DoS protection and zone-based security architecture
• Architect and manage centralized firewall management through:
  • Panorama (multi-device management, template stacks, device groups)
  • Strata Cloud Manager (SCM) for unified SASE and NGFW policy management
  • Policy optimization, rule base hygiene, and security posture reviews
• Lead Prisma Access deployments integrated with existing NGFW infrastructure:
  • Remote user access via GlobalProtect and ZTNA 2.0
  • Remote network and service connection onboarding
  • Unified policy enforcement across on-prem and cloud-delivered security
• Support Prisma Cloud engagements where applicable:
  • Cloud Security Posture Management (CSPM) and compliance policy configuration
  • Cloud Workload Protection (CWP) and container/serverless security
  • Integration with DevSecOps pipelines and CI/CD environments
• Design and implement high availability (HA) architectures:
  • Active/Passive and Active/Active HA pair configurations
  • ECMP, PBF, and advanced routing with BGP/OSPF on PAN-OS
• Lead migration activities from legacy firewall platforms (Cisco ASA, Fortinet, Check Point) to Palo Alto Networks NGFW
• Troubleshoot complex issues related to:
  • Session table behavior, traffic flows, and policy evaluation order
  • Decryption failures, certificate chain issues, and bypass scenarios
  • HA failover, routing anomalies, and interface/zone misconfigurations
  • WildFire verdicts, threat log analysis, and incident response support
• Provide technical leadership and mentorship to engineers on the team
• Interface with stakeholders, vendors, and customers to drive successful security outcomes
• Develop documentation, runbooks, standard operating procedures, and deployment guides

Required Qualifications:

• 5 8+ years of experience in network security engineering with a strong focus on enterprise firewalls and perimeter security
• Hands-on production experience deploying and managing Palo Alto Networks NGFW (PA-Series and/or VM-Series)
• Deep expertise in PAN-OS, including:
  • Security policy design, NAT, routing, and interface configuration
  • Decryption policy architecture and PKI integration
  • Log forwarding, monitoring, and Panorama administration
• Strong working knowledge of:
  • Network security fundamentals (TCP/IP, routing protocols, VPN - IPsec/SSL)
  • Layer 7 application visibility and control concepts
  • Zero Trust architecture principles and implementation
• Proven experience managing Panorama at scale (template stacks, shared policy, device groups)
• Demonstrated ability to lead security implementations or workstreams in enterprise environments
• Strong analytical and troubleshooting skills across complex, multi-vendor network security environments

Preferred Qualifications:

• Palo Alto Networks certifications: PCNSA, PCNSE (strongly preferred), or PCSAE
• Experience with Prisma Access deployments alongside physical NGFW infrastructure
• Exposure to Prisma Cloud (CSPM, CWP) and cloud-native security tooling (AWS, Azure, GCP security groups, native firewalls)
• Familiarity with XSOAR or XSIAM for security operations and SOAR integration
• Experience with firewall migration tooling (Expedition) and rule base optimization
• Knowledge of compliance frameworks (PCI-DSS, HIPAA, NIST, CIS) as applied to firewall policy design
• Scripting or automation experience (Python, Ansible, Terraform) for PAN-OS or Panorama API-driven workflows

MatchPoint Solutions provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

Job Tags

Similar Jobs