Job Description

Senior Firewall Engineer
Las Colinas, Irving, TX (Hybrid)

Job Summary

We are seeking a highly skilled Senior Firewall Engineer with strong expertise in enterprise firewall technologies, network security, and remote access solutions. The ideal candidate will have hands-on experience with Palo Alto and Fortinet firewalls, advanced networking concepts, security policy management, troubleshooting, and automation technologies. This role involves supporting global remote access infrastructure, managing firewall policies, and ensuring secure connectivity for end users across the organization.

• Design, implement, manage, and troubleshoot enterprise firewall environments primarily using Palo Alto and Fortinet technologies.
• Support and maintain remote access solutions, including GlobalProtect VPN.
• Manage firewall access requests, security policies, NAT configurations, and rule optimization.
• Troubleshoot network connectivity, VPN, proxy, and security-related issues for end users and enterprise applications.
• Support and maintain secure remote access infrastructure with a focus on firewall access management.
• Work with HIP (Host Information Profile) Posturing and endpoint compliance policies.
• Assist with Broadcom WSS Agent (Web Security Service) configurations and troubleshooting.
• Collaborate with networking and security teams to improve infrastructure security and performance.
• Develop and maintain automation scripts/tools using Python, Ansible, or Terraform to streamline firewall and network operations.
• Participate in after-hours maintenance activities, weekend implementations, and emergency support when required.
• Monitor firewall health, logs, and alerts to ensure optimal system performance and security compliance.
• Document configurations, procedures, and operational standards.

• 7+ years of experience in Network Security or Firewall Engineering.
• Strong hands-on experience with:
  • Palo Alto Firewalls
  • Fortinet Firewalls
  • Network Security & IP Protocols
  • Firewall policy management and troubleshooting
  • Remote access technologies and VPN support
• Strong understanding of:
  • TCP/IP, Routing, Switching, DNS, NAT, VPNs
  • Access policies and firewall rule management
  • Proxy technologies and web filtering concepts
• Experience supporting GlobalProtect remote access environments.
• Familiarity with Broadcom WSS Agent / Web Security Service is preferred.
• Knowledge of HIP Posturing and endpoint compliance controls.
• Experience with automation and infrastructure-as-code tools:
  • Python
  • Ansible
  • Terraform
• Strong troubleshooting and analytical skills.
• Excellent communication and collaboration abilities.

• PCNSE (Palo Alto Networks Certified Network Security Engineer) certification preferred.
• Experience in large enterprise or global network environments.
• Exposure to cloud security and automation frameworks is a plus.

Job Tags

Similar Jobs