Daily Duties & Responsibilities
• Design and deploy highly available, scalable, and secure cloud infrastructure with a focus on AWS and Azure
• Manage and deploy VM-Series Palo Alto firewalls in Azure and AWS
• Manage and deploy F5 BIG-IP LTM and ASM in Azure and AWS
• Analyze and resolve configuration issues across development, test, and production environments
• Build and maintain effective monitoring, logging, and auditing to ensure compliance with mandated frameworks (e.g., ARC-AMP/MARS-E, NIST, HIPAA, PII, SOX, PCI, CMMC, CUI)
• Implement secure, zero-trust infrastructure in the cloud
• Apply security experience relevant to state and local government environments
Required Skills
• 10 years' experience in Network Security and Engineering
• Minimum 5 years hands-on experience designing, deploying, scaling, upgrading, troubleshooting, and optimizing Palo Alto VM-Series Firewalls in both AWS and Azure cloud environments
• Experience with Panorama Management, security policy design, threat prevention tuning, and log analysis
• Demonstrated ability to architect zero-trust controls using Palo Alto technology
• 5 years' experience deploying, configuring, and maintaining BIG-IP F5 LTM
Preferred Skills
• Palo Alto Firewalls
• F5 LTM
• F5 ASM
• F5 I-Rules
• INFOBLOX DDI
• Forescout
• OPSWAT MetaDefender/ICAP
• Big-IP F5 XC
• Prisma Cloud
• Cisco Umbrella
Preferred Certifications
• PCNSA, PCNSE
• SC100 – Microsoft Cybersecurity Architect
• AWS Certified Cloud Solutions Architect
Required Education
• College degree or 10+ years of equivalent experience as a Palo Alto Cloud Engineer
• Must hold a Palo Alto, AWS, or Azure certification
Additional Skills & Attributes
• Excellent communication skills, both written and verbal
• Self-starter
• Explicit experience with Panorama templates and device groups, GlobalProtect in the cloud, and high-availability VPN/traffic routing on VM-Series
• Experience designing and maintaining infrastructure in AWS/Azure
• Cloud security design, operations, and automation experience
• Experience documenting security tools, deployment configurations, incident reports, etc.