Palo Alto Firewall Engineer

Job Posting Description

Are you curious, motivated, and forward-thinking? At FIS, you’ll have the opportunity to work on some of the most challenging and relevant issues in financial services and technology. Our talented people empower us, and we believe in being part of a team that is open, collaborative, entrepreneurial, passionate and above all fun.

About the team

We are seeking a highly skilled Palo Alto Firewall Engineer to join our security team. The ideal candidate will have extensive experience in networking and security, with a strong focus on managing and optimizing virtual Palo Alto firewalls deployed in AWS. This role will be critical in ensuring the security, reliability, and performance of our network infrastructure

What you will be doing :

• Configure, manage, and optimize virtual Palo Alto firewalls deployed in AWS to ensure high availability and security.
• Oversee and manage day-to-day security operations, including monitoring, detection, and response to security incidents.
• Implement, test, and maintain firewall rules and policies to ensure secure and efficient network traffic flow.
• Design and architect Palo Alto firewalls deployment to support robust and scalable infrastructure. Provide input on network design and architecture, including segmentation, firewall placement, and integration with other security solutions.
• Configure and manage GlobalProtect VPN for secure remote access.
• Implement and manage SSL decryption policies to inspect encrypted traffic for potential threats.
• Configure and manage Content ID filtering to protect against malware, phishing, and other content-based threats.
• Lead and participate in security incident response efforts, including investigation, containment, remediation, and documentation.
• Upgrade the Palo Alto Firewalls on a regular cadence.
• Maintain up-to-date documentation for firewall configurations, policies, procedures, and best practices.
• Stay current with the latest developments in Palo Alto firewall technology and network security trends to continually improve our security posture.

What you bring:

• 7+ years of experience in network security, with at least 3 years focusing on management of Palo Alto firewalls.
• Proven experience in managing Palo Alto firewalls, with a focus on virtual deployments in AWS environment including all aspects of design, procurement, installation, and maintenance.
• Strong knowledge of network security principles, including firewall policies, VPNs, SSL decryption, content filtering, and DNS sink-holing.
• Experience with AWS networking and security services.
• Deep understanding of TCP/IP, routing, and switching, subnetting, network segmentation, VLANs, DNS, DHCP and IP addressing.
• Hands-on experience implementing BGP routing protocol.
• Thorough understanding of NAT and PAT.
• Experience implementing User-ID based policies.
• Strong skills in troubleshooting network and security issues, including log analysis and threat detection.
• Proficient in using Wireshark tool and analyzing packets flow.
• Excellent analytical and problem-solving skills.

Certifications Preferred

• PCNSE – Palo Alto Networks Certified Network Security Engineer
• PCFE - Palo Alto Networks Certified Software Firewall Engineer
• AWS Certified Solutions Architect Associate
• SSCP – Systems Security Certified Practitioner (SSCP)
• CompTIA Security

What we offer you:

• A multifaceted job with a high degree of responsibility and a broad spectrum of opportunities
• A broad range of professional education and personal development possibilities – FIS is your final career step!
• A competitive salary and benefits
• A variety of career development tools, resources and opportunities

Privacy Statement

FIS is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how FIS protects personal information online, please see the Online Privacy Notice.

Sourcing Model

Recruitment at FIS works primarily on a direct sourcing model; a relatively small portion of our hiring is through recruitment agencies. FIS does not accept resumes from recruitment agencies which are not on the preferred supplier list and is not responsible for any related fees for resumes submitted to job postings, our employees, or any other part of our company.

#pridepass