Network Security Engineer

Network Security EngineerKey Skill: Palo Alto PRISMA Job Location: San Rafael, CA Minimum Experience 10 Years (Manager level)Job Description: Serve as a subject matter expert for the customers Palo Alto PRISMA Access, Cloud Palo Alto Next Gen Firewalls and SaaSSASE services. Experience working with configuring Secure Mobile Users Secure Remote Sites and Branch offices using cloud-based next-generation security infrastructure. Provide an experience on Palo Alto Prisma Access security offerings and integration in existing customer environments. Professional level understanding and experience of Prisma Access Cortex data leak CASBDLP services compliance assurance user behavior monitoring and advanced threat prevention. Experience in managing administration of Panorama and NextGen firewall models. Working experience on configuring IPSIDS Security profiles on Palo Alto firewalls. Experience on remote user access technologies, Global Protect and Any Connect. Good understanding on Tunneling protocols such as SSLTLS IPsec and GRE and Routing protocols such as BGP and static routing. Good understanding on Authentication methodologies including 2FA RADIUS LDAP AD. Experience across IT sanctioned and IT unsanctioned SaaS applications with unified visibility and management. Experience on Next-Generation Firewall capabilities configuration and deployment PANOS knowledge. Experience on Configure User-ID Configure HIP Information and Manage Multiple Tenants to deliver next-generation technologies within our Prisma Access. Experience understanding exploits malware ransomware etc their creation and activation. Experience working with inline security functionality including NGFW IPS URL filtering malware sandboxing and DLP. Experience on configuring Firewall IPsec SSL VPN Working with customers to gather complex network requirements to be used in creating highly reliable and scalable networking designs Experience in configuring Web and URL Filtering policies Sandboxing Cloud Firewall CASB and DLP Produce detailed design documents such as network diagrams IP spreadsheets device descriptions and narratives. Creation of technically detailed reports on firewall block lists device status change management hardware software upgrades and other areas Correlate detected network events to identify potential problems or root causes. Assist in troubleshooting and problem solving a wide variety of client issues for branch and mobile users. Participate in projects that involve existing network infrastructure as required. Participate in a formal incident rapid response process for high priority incidents Collaborate with the team to ensure that an incidents underlying problems are managed and resolved Implement network change in the context of incident resolution problem management and service requests Be aware of and follow existing infrastructure management change procedures Provide training to team members on an as needed basis Work outside of normal business hours when required scheduled maintenance outage response last minute urgent requests rotating on-call Expert level of familiarity in implementing and troubleshooting firewall technologies Professional level understanding of TCP and UDP including the ability to identify root causes of illusive problems through packet capture analysis Experience implementing and troubleshooting HA firewall clusters Professional level understanding of IPsec VPNs as well as real world implementation and troubleshooting experience Professional understanding of industry standard policies regulations and compliance Ability to pass a pre-employment background and drug screen in accordance with applicable laws Strong communication written and verbal and presentation skills both internally and externally Strong problem finding and solving skills ability to analyze complex multivariate problems and use a systematic approach to gain quick resolution even under stress