Senior Security Engineer

*****NO C2C OR THIRD PARTY INQUIRIES*****

Senior Security Engineer

• Location: Denver, CO – 3x Per Week Onsite
• Salary Range: $120k - $140k

The Professional Services Consultant (SASE) is an expert with a strong understanding of network security, Palo Alto Networks firewalls, GlobalProtect, and Prisma Access. The Professional Services Consultant knows how to implement, optimize, and operate SASE Platforms.

This is a highly technical role with a focus on large scale Prisma Access deployments. The Extended Expertise Consultant will develop, maintain and leverage expertise on SASE Platforms and the relevant tools that can be used to optimize the deployment and operation of the Platforms.

• BS in Computer Science or equivalent education/training/experience
• Prisma Access Experience: Proven track record configuring and supporting enterprise Prisma Access deployments—including Remote Networks and Mobile Users—with hands-on expertise implementing core security services such as SSL Decryption and Data Loss Prevention (DLP).
• 4+ years of remote user access technologies, including IPSec VPN, SSL VPN, Explicit Proxy, ZTNA
• Experience with SD-WAN Architectures and providers
• Tunneling protocols such as SSL/TLS, IPSec, GRE
• Authentication methodologies, including: 2FA, SAML, RADIUS, LDAP,TACACS, Certificates
• Directory Services, including: OKTA, Active Directory, Azure ADFS.
• Strong Routing Skills, including: BGP, Redistribution to other routing protocols, Static Routing, Traffic Steering, PBF.
• Next-Generation Firewall capabilities, configuration, and deployment. Including Panorama, User-ID, App-ID, Threat Prevention, URL Filtering, CASB, DLP, SSL Decryption.
• Experience deploying and configuring SD-WAN technologies, preferably Prisma SD-WAN (Formerly CloudGenix) and PanOS native environments
• Experience identifying and executing on opportunities where automation can be used to optimize the deployment and operation of Palo Alto Networks SASE products in on-premise, and public cloud models.
• Ability to work within small creative teams as well as cross-functional teams
• Excellent written and verbal communication skills

Your Impact

• Migrate customers from legacy remote access technologies to Palo Alto Networks platforms
• Build custom security policies and application signatures, configured for our client’s needs
• Progress and uphold expertise in deploying advanced Palo Alto Networks features and functionality
• Provide after hours and weekend on-call support, as needed, to support maintenance activities
• Analyze logs and events from the solution to perform initial troubleshooting and issue identification
• Work with our Technical Assistance Center to troubleshoot and diagnose support cases
• Maintain the Company's solution and provide mentorship on code upgrades and best practices
• Ensure client needs are met and deliverables produced on time according to specified project deliverables and scope
• Travel is required in the scope of your duties. It can be heavy but we believe in a work/life balance and will do our best to ensure project travel is minimized when possible.

Your Experience

• Experience with network, security solutions, remote access and remote connectivity technologies in large environments.
• Experience with troubleshooting skills related to networking, routing, IP, NAT, IPSEC VPNs and knowledge of how these interact with applications and users
• Experience with installation, configuration and operation of NGFW products
• Effectively handle multiple projects and work calmly under pressure
• An excellent writer, with strong verbal social skills, with demonstrated ability to communicate to senior leaders, technical peers, and non-technical partners
• Ability to work with the customers security & network teams to build confidence across the business units impacted by the change with the addition Palo Alto Networks
• Experience using of remote user access technologies, including IPSec VPN, SSL VPN, Explicit Proxy, ZTN
• Excellent written and verbal communication skills
• Director Customer Consulting Experience
• Authentication methodologies, including: 2FA, SAML, RADIUS, LDAP Certificates
• Strong RoutingSkills, including BGP and StaticRouting
• Next-Generation Firewall capabilities, configuration, and deployment. Including Panorama, User-ID, App-ID, Threat Prevention, URL Filtering, SSL Decryption.
• Ability to work within small creative teams as well as cross-functional teams