Aviatrix Engineer

Role Description

Client is seeking a highly skilled Cloud Network Security Consultant to lead the deployment and configuration of multiple virtual firewalls, while also supporting application separation between production and non-production environments. The ideal candidate will help design a scalable, cost-efficient, and highly available solution capable of supporting up to 40TB/sec aggregate traffic across AWS, Azure, and GCP.

This role requires deep expertise in Palo Alto Networks (PAN) VM-Series with Flex licensing, Aviatrix-based cloud networking architectures, and strong understanding of cloud-native design patterns for security, performance, and resilience.

Key Responsibilities

• Analyze and balance traffic performance, cost optimization, and high availability requirements for a multi-cloud environment with very high data throughput (40TB/sec).
• Evaluate and present trade-offs between Aviatrix and Palo Alto Flex VM architectures, including technical, operational, and cost implications.
• Lead the deployment and configuration of multiple PAN VM-Series firewalls using Flex licensing models.
• Design and advise on application separation strategies between production and non-production environments using firewalls, route segmentation, and policy-based control.
• Assist internal teams with PoC deployments, performance testing, and integration strategies.
• Document the recommended architecture, deployment plans, and operational guidance.

Qualifications

• 5+ years of experience in cloud network engineering or security architecture.
• Proven track record deploying PAN VM-Series Firewalls managed by Panorama using Flex licensing models.
• Experience designing and implementing Aviatrix Transit Network (including CoPilot, Spoke, and FireNet) in production environments.