Senior Palo Alto Network Security Architect / Consultant

Apply
  • Role: Senior Palo Alto Network Security Architect / Consultant
  • Employment: Part Time
  • Experience: 8 to 14 Years
  • Salary: Not Disclosed
  • Location: PAN INDIA Remote

Programmers.IO is currently looking to hire Senior Palo Alto Network Security Architect / Consultant on Experience in Palo Alto Next-Generation Firewall, Palo Alto VM-Series Firewalls in AWS, Strata Cloud Manager, Panorama, security policy migration, Network Address Translation, VPN, routing, threat prevention This is must Experience with routing protocols and connectivity concepts including BGP-Border Gateway Protocol, OSPF-Open Shortest Path First, static routing, site-to-site VPN, and hybrid connectivity. Experience conducting firewall migration assessments, rule reviews, policy mapping, policy cleanup, and configuration validation Ability to work independently, drive technical discussions, and lead implementation activities with minimal supervision. Technology. If you think you are a good fit and willing to work from PAN INDIA Remote location.Please apply with you resume or share your resume at ayushi.khandelwal@programmers.ai

Experience Required: 8 to 14 Years

Role Type Senior client-facing consulting role for Palo Alto firewall assessment, AWS deployment, migration, configuration, validation, and handover.
Experience Range 8-10+ years overall network security experience; strong Palo Alto specialization is mandatory.
Primary Technology Focus Palo Alto NGFW, VM-Series Firewalls in AWS, Strata Cloud Manager, Panorama, security policy migration, NAT, VPN, routing, threat prevention.
Client Environment Context Client is using Strata Cloud Manager and Palo Alto virtual firewalls deployed in AWS. Requirement involves migration/replication from existing on-premises Palo Alto firewall configurations into AWS instances.
Ideal Candidate Hands-on Palo Alto specialist who can analyze current-state configurations, identify relevant policies/objects/features, replicate them in AWS, and configure/validate Palo Alto security capabilities independently.

Role Summary
We are seeking a Senior Palo Alto Network Security Architect / Consultant / Engineer with 8-10+ years of experience and deep hands-on expertise in Palo Alto Networks technologies. The consultant will support one of our clients in assessing an existing on-premises Palo Alto firewall environment, analyzing current policies and configurations, and replicating/migrating relevant configurations into Palo Alto virtual firewalls deployed in AWS.
This role requires a senior, client-facing resource who can independently lead firewall configuration discovery, policy/object analysis, AWS firewall implementation, Strata Cloud Manager administration, security feature enablement, testing, troubleshooting, documentation, and operational handover.

Key Responsibilities
  • Assess and analyze the client’s existing on-premises Palo Alto firewall environment, including policies, objects, NAT rules, zones, interfaces, VPNs, routing, security profiles, and logging configurations.
  • Identify relevant current-state configurations and replicate/migrate them into Palo Alto virtual firewall instances deployed in AWS.
  • Design, configure, test, and validate Palo Alto VM-Series firewalls in AWS to support cloud workloads and hybrid connectivity.
  • Configure and manage Strata Cloud Manager for centralized policy management, operational visibility, monitoring, governance, and administration.
  • Work with Panorama where applicable, while recognizing that the client’s target management platform is Strata Cloud Manager.
  • Configure Palo Alto security features such as App-ID, User-ID, Content-ID, Threat Prevention, Anti-Spyware, Anti-Virus, Vulnerability Protection, URL Filtering, WildFire, SSL Decryption, GlobalProtect, logging, and security profiles.
  • Perform firewall policy analysis, rule clean-up, object rationalization, policy mapping, and least-privilege rule optimization before migration.
  • Implement and validate security zones, interfaces, NAT, VPN, routing, HA/failover, logging, and traffic inspection policies.
  • Validate end-to-end traffic flows between on-premises networks, AWS VPCs, application segments, and security inspection points.
  • Plan and support migration execution, cutover readiness, rollback planning, post-migration validation, and stabilization activities.
  • Troubleshoot firewall, routing, VPN, NAT, application access, and security policy issues during implementation and stabilization.
  • Prepare technical documentation including current-state assessment, detailed design, implementation plan, migration mapping, test plan, as-built documentation, operational handover, and knowledge transfer material.
  • Collaborate with client infrastructure, network, security, cloud, application, and operations teams in a mature consulting manner.

Required Skills and Experience
  • 8-10+ years of experience in network security, firewall administration, security infrastructure, or enterprise network architecture.
  • Strong, hands-on Palo Alto Networks NGFW experience; Palo Alto-specific experience is mandatory for this role.
  • Hands-on experience with Palo Alto VM-Series Firewalls deployed in AWS environments.
  • Experience with Strata Cloud Manager is strongly required; Panorama experience is also highly valuable for policy administration and migration contexts.
  • Ability to analyze existing on-premises Palo Alto firewall configurations and replicate relevant policies, objects, NATs, VPNs, routes, and security profiles into AWS-based Palo Alto firewalls.
  • Strong understanding of Palo Alto features: App-ID, User-ID, Content-ID, security zones, NAT, VPN, routing, security profiles, Threat Prevention, WildFire, URL Filtering, Anti-Spyware, Anti-Virus, Vulnerability Protection, SSL Decryption, logging, and monitoring.
  • Good knowledge of AWS networking concepts including VPC, subnets, route tables, Transit Gateway, VPN, Direct Connect, Security Groups, Network ACLs, and cloud connectivity patterns.
  • Strong understanding of enterprise network architecture, DMZ, segmentation, high availability, perimeter security, cloud security, and hybrid network connectivity.
  • Experience with routing protocols and connectivity concepts including BGP, OSPF, static routing, site-to-site VPN, and hybrid connectivity.
  • Ability to analyze firewall logs, traffic flows, packet captures, threat logs, and security events to troubleshoot and validate implementations.
  • Experience conducting firewall migration assessments, rule reviews, policy mapping, policy cleanup, and configuration validation.
  • Strong documentation, communication, stakeholder management, and client-facing consulting skills.
  • Ability to work independently, drive technical discussions, and lead implementation activities with minimal supervision.

Preferred / Good-to-Have Skills
  • Palo Alto Networks Certified Network Security Engineer/Administrator certification strongly preferred; PCNSE/PCNSA
  • CCNP Security, AWS networking/security certifications, or equivalent credentials would be advantageous.
  • Experience delivering Palo Alto VM-Series firewall deployments in AWS production environments.
  • Experience migrating security services from on-premises data centers into AWS or hybrid cloud environments.
  • Experience with Infrastructure as Code tools such as Terraform for firewall or cloud network deployments.
  • Experience integrating Palo Alto logs with SIEM/SOC platforms using syslog, log forwarding, or cloud-native monitoring integrations.
  • Understanding of Zero Trust Network Security principles and policy design.
  • Exposure to regulated environments, compliance controls, and change management processes.


Expected Deliverables
  • Current-state Palo Alto firewall configuration assessment report.
  • Firewall policy, object, NAT, VPN, security profile, and routing migration mapping document.
  • AWS Palo Alto VM-Series firewall deployment architecture and design documentation.
  • Strata Cloud Manager configuration and operational documentation.
  • Security feature enablement documentation covering threat prevention, WildFire, URL filtering, SSL decryption, logging, and other relevant Palo Alto features.
  • Implementation plan, migration runbook, cutover checklist, and rollback plan.
  • Functional, connectivity, routing, NAT, VPN, failover, and security validation test results.
  • As-built documentation, operational handover guide, and knowledge transfer material.
  • Post-migration stabilization and troubleshooting support notes.

Skills and Knowledge:

  • Experience in Palo Alto Next-Generation Firewall, Palo Alto VM-Series Firewalls in AWS, Strata Cloud Manager, Panorama, security policy migration, Network Address Translation, VPN, routing, threat prevention This is must Experience with routing protocols and connectivity concepts including BGP-Border Gateway Protocol, OSPF-Open Shortest Path First, static routing, site-to-site VPN, and hybrid connectivity. Experience conducting firewall migration assessments, rule reviews, policy mapping, policy cleanup, and configuration validation Ability to work independently, drive technical discussions, and lead implementation activities with minimal supervision.