Firewall Engineer

Senior Firewall Engineer
Location: Charlotte, NC | Dallas, TX | Minneapolis, MN | Phoenix (Chandler), AZ | Des Moines, IA | San Francisco, CA | New York City Metro Area, NY | Columbus, OH | Philadelphia–Wilmington, PA/DE | Raleigh, NC | San Antonio, TX | Washington, DC (Hybrid)

W2
USC/GC

Job Summary

We are seeking a highly skilled Senior Firewall Engineer with strong expertise in enterprise firewall technologies, network security, and remote access solutions. The ideal candidate will have hands-on experience with Palo Alto and Fortinet firewalls, advanced networking concepts, security policy management, troubleshooting, and automation technologies. This role involves supporting global remote access infrastructure, managing firewall policies, and ensuring secure connectivity for end users across the organization.

Key Responsibilities

• Design, implement, manage, and troubleshoot enterprise firewall environments primarily using Palo Alto and Fortinet technologies.
• Support and maintain remote access solutions, including GlobalProtect VPN.
• Manage firewall access requests, security policies, NAT configurations, and rule optimization.
• Troubleshoot network connectivity, VPN, proxy, and security-related issues for end users and enterprise applications.
• Support and maintain secure remote access infrastructure with a focus on firewall access management.
• Work with HIP (Host Information Profile) Posturing and endpoint compliance policies.
• Assist with Broadcom WSS Agent (Web Security Service) configurations and troubleshooting.
• Collaborate with networking and security teams to improve infrastructure security and performance.
• Develop and maintain automation scripts/tools using Python, Ansible, or Terraform to streamline firewall and network operations.
• Participate in after-hours maintenance activities, weekend implementations, and emergency support when required.
• Monitor firewall health, logs, and alerts to ensure optimal system performance and security compliance.
• Document configurations, procedures, and operational standards.
• Looking for Senior Firewall Engineer with strong Firewall background (Palo Alto, Fortinet)
• Source Network, IP Protocols, Palo Alto, Fortinet (Must), Global Protect & WSS Broadcom (Nice to have)

• Global Protect is the tool that they support remotely
• 75% Firewall remote access, Firewall Access
• Someone High Level Networking 3 experiences
• They work on an Access, Policies & troubleshoot for the end users
• WSS Broadcom - Broadcom WSS Agent (Web Security Service Agent)
• Someone who knows little proxy
• HIP Posturing, also known as Host Information Profile (HIP) Posturing
• Automation Background - Coding, Python, Ansible, TerraformRequired Skills & Experience

• 7+ years of experience in Network Security or Firewall Engineering.
• Strong hands-on experience with:
• Palo Alto Firewalls
• Fortinet Firewalls
• Network Security & IP Protocols
• Firewall policy management and troubleshooting
• Remote access technologies and VPN support
• Strong understanding of:
• TCP/IP, Routing, Switching, DNS, NAT, VPNs
• Access policies and firewall rule management
• Proxy technologies and web filtering concepts
• Experience supporting GlobalProtect remote access environments.
• Familiarity with Broadcom WSS Agent / Web Security Service is preferred.
• Knowledge of HIP Posturing and endpoint compliance controls.
• Experience with automation and infrastructure-as-code tools:
• Python
• Ansible
• Terraform
• Strong troubleshooting and analytical skills.
• Excellent communication and collaboration abilities.

Preferred Qualifications

• PCNSE (Palo Alto Networks Certified Network Security Engineer) certification preferred.
• Experience in large enterprise or global network environments.
• Exposure to cloud security and automation frameworks is a plus.

Pay: $55.00 - $60.00 per hour

Work Location: In person