Senior Network Security Engineer

Senior Network Security Consultant (Juniper SRX to Palo Alto NGFW Migration) | Denver, CO | 12+ Month Contract

Location: Denver, CO (100% Onsite)

Duration: 12 Months Contract (Strong Possibility of Extension)

Employment Type: W2 Only

About the Opportunity

We are seeking an experienced Network Security Consultant / Palo Alto SME to support a major firewall transformation initiative for a leading enterprise customer. This is not a traditional firewall administration role.

The primary focus of this engagement is the migration of Juniper SRX environments to Palo Alto Networks Next-Generation Firewalls (NGFW) . The ideal candidate will have deep expertise in both Juniper and Palo Alto technologies and be comfortable leading migration activities, firewall redesign, cutovers, optimization, and post-migration support.

What You'll Be Doing

• Lead migration efforts from Juniper SRX to Palo Alto NGFW
• Analyze and translate existing Juniper configurations into Palo Alto best practices
• Design and implement security policies, NAT policies, Application-ID, User-ID, and Content-ID
• Support firewall deployment, routing integration, and security optimization
• Participate in maintenance windows, migration cutovers, and rollback planning
• Optimize performance, sizing, capacity planning, and operational workflows
• Collaborate directly with customer engineering and leadership teams
• Mentor customer teams on Palo Alto operational best practices following migration

Required Skills

✅ Strong hands-on experience with Palo Alto NGFW and Panorama

✅ Experience with Juniper SRX Firewall Administration and Migration Projects

✅ Expertise in:

• Application-ID
• User-ID
• Content-ID
• NAT
• VPN
• SSL Decryption
• Threat Prevention
• WildFire
• URL Filtering

✅ Strong networking knowledge:

• TCP/IP
• BGP
• OSPF
• IS-IS
• MPLS
• EVPN/VXLAN
• Route Redistribution
• ECMP

✅ Experience leading firewall migration and cutover activities

Preferred Skills

• Service Provider Environment Experience
• Cloud Security Integrations (AWS, Azure, GCP)
• SD-WAN Exposure
• Cortex Data Lake or Expedition