Mid-Level Network Security Engineer - Palo Alto (Remote)

Who You Are

You are a skilled Network Security Engineer with hands-on experience implementing, migrating, supporting, and troubleshooting Palo Alto Networks firewall environments. You bring strong technical fundamentals across enterprise networking, firewall policy, VPN, routing, high availability, and security services, along with the professionalism needed to deliver client-facing project work.

You are detail-oriented, collaborative, and accountable, with the ability to communicate clearly, surface risks early, and contribute to predictable delivery outcomes. You are eager to deepen your Palo Alto Networks expertise, grow into broader design and consulting responsibilities, and help strengthen reusable standards, documentation, and delivery practices across the Network Security practice.

About The Role

The Network Security Engineer - Palo Alto Networks supports the delivery of client security engagements through hands-on configuration, deployment, migration, validation, troubleshooting, and operational transition of Palo Alto Networks firewalls and supporting security services.

This role combines technical implementation with growing design, consulting, and technical leadership responsibility. The engineer will deliver assigned workstreams, participate in client workshops and technical reviews, and contribute reusable knowledge that helps build a scalable, high-quality Network Security practice.

Other responsibilities include

• Configure, deploy, migrate, validate, and troubleshoot Palo Alto Networks firewalls and support security services.
• Support discovery, implementation planning, testing, cutover, rollback, documentation, and operational transition activities.
• Administer security policy, NAT, routing, VPN, high availability, logging, threat prevention, and Panorama-managed environments.
• Participate in client workshops, technical reviews, and knowledge-transfer sessions with increasing independence.
• Partner with senior engineers, Technical Project Leads, PMO, and Delivery Operations to surface risks and deliver predictable outcomes.
• Build trusted client relationships through strong ownership, clear communication, and reliable delivery.
• Produce implementation plans, test results, as-built documentation, diagrams, and knowledge-transfer materials.
• Contribute lessons learned, implementation standards, reusable playbooks, and delivery documentation.
• Mentor developing engineers and support knowledge sharing across the Network Security practice.
• Support planned maintenance windows and travel when client delivery requires it.
• Complete ongoing security awareness training and comply with company policies to the requirements section.
• Identify and escalate security risks to the appropriate Executive Leadership Team member and actively contribute to remediation efforts
• Other duties as assigned

Desired skills and experience

• 4-7 years of experience in network security, firewall engineering, or enterprise networking, including hands-on project delivery.
• 2+ years of Palo Alto Networks experience across implementation, migration, operations, or troubleshooting.
• Working knowledge of PAN-OS, Panorama, security policy, NAT, GlobalProtect, site-to-site VPN, routing, high availability, logging, and security profiles.
• Understanding of TCP/IP, VLANs, BGP/OSPF, segmentation, identity services, certificates, and enterprise network dependencies.
• Experience supporting discovery, implementation planning, testing, cutover, rollback, and operational transition activities.
• Ability to create clear technical documentation, diagrams, implementation plans, test results, and knowledge-transfer materials.
• Professional Services, consulting, multi-site deployment, or customer-facing delivery experience strongly preferred.
• Palo Alto Networks professional-level certification or active progress toward one preferred; PCNSA or PCNSE legacy credentials remain relevant evidence.
• Experience with Prisma Access, Strata Cloud Manager, GlobalProtect, decryption, SD-WAN, cloud firewalls, or SIEM integrations is a plus.
• Complementary certifications such as CCNA, CCNP Security, Security+, CISSP Associate, Azure Security, or AWS Security are a plus.
• Strong communication, ownership, and collaboration skills with the ability to escalate risks before they become delivery issues.

We live and breathe our core values

• We Before Me: We demonstrate empathy through our actions and solicit diverse voices and opinions. We put ourselves in each other's shoes, readily admit our mistakes, and generously share our time and knowledge.
• Dare To Be Great: We are big-picture thinkers who focus on solutions to problems. We solicit and offer actionable feedback to others without hesitation. We embrace opportunities to improve ourselves, our teams, and our work. We aim to be the best of the best.
• Own It: We set clear expectations, communicate proactively, and follow through on our commitments. We take pride in the experiences we create and the outcomes we deliver. We are personally invested in the success of our team and our clients. We iterate to deliver ever better results.

We are consistently listed among Inc & Crain's "Best Places to Work" and we're proud of our accessible & engaged executive team. We believe in cultivating an atmosphere of inclusion and providing an environment that enables every employee to work to the best of their ability.

Some of Our Benefits

• Unlimited Paid Time Off (PTO)
• Incentive compensation plans for all employees
• Company-funded 401k contributions
• Zero-cost employer-covered health insurance
• Annual BYOD (Bring Your Own Device) reimbursement up to $500
• Paid Parental Leave
• Transparent, candid culture with 1:1 coaching, performance reviews, and a consistent feedback loop
• Quirky, diverse, respectful, high-performing coworkers you'll want to achieve greatness with!

• Must be based in the United States.
• Pursuant to the NYC Pay Transparency Law, the base salary range in New York City for this position is $140,000- $150,000, plus opportunities for profit-sharing bonus and/or commission. Compensation in other geographies may vary.