jazzhr
Palo Alto Security Engineer
Zappsec Inc.
IND
Full-time
Senior Level
Onsite
Discovered Yesterday
Free
Job Fit Check
Base Career helps you apply smarter for this job.
?%
Ready to ScanFull Job Posting
- Build and maintain Panorama templates, template stacks, and device groups across client estates.
- Structure pre-rules and post-rules so inheritance behaves predictably as device groups grow.
- Run commit and push workflows, including partial commits and config audits before change windows.
- Manage log collectors, log forwarding profiles, and retention design.
- Schedule and validate dynamic content updates for applications, threats, and WildFire.
- Plan and execute PAN-OS upgrades across HA pairs, with tested rollback for every step.
- Onboard new firewalls into Panorama and bring them under central policy control.
- Write, tune, and document security policy, NAT policy, and decryption policy.
- Convert legacy port-based rules to App-ID rules using Policy Optimizer.
- Identify and remove shadowed, redundant, expired, and unused rules.
- Apply security profile groups covering antivirus, anti-spyware, vulnerability protection, URL filtering, WildFire, file blocking, and DNS Security.
- Maintain address objects, service objects, tags, dynamic address groups, and external dynamic lists against a naming standard.
- Configure User-ID and bind policy to identity groups rather than IP ranges.
- Configure SSL forward proxy and inbound inspection, including certificate handling and decryption exclusions.
- Migrate rule bases from Cisco ASA, Check Point, Fortinet, and Juniper SRX to PAN-OS.
- Use Expedition or equivalent tooling for conversion, object cleanup, and App-ID adoption.
- Rehost policy onto VM-Series and Cloud NGFW in AWS and Azure.
- Design the enforcement topology with the client architect, covering Gateway Load Balancer, transit VPC, and Azure Virtual WAN hub patterns.
- Map on-premises zones, objects, and groups to cloud constructs, resource tags, and dynamic address groups.
- Validate each migration wave against traffic logs before and after cutover.
- Write the cutover plan, the rollback plan, and the post-migration validation steps for every window.
- Configure Prisma Access mobile users, remote networks, and service connections.
- Build and support GlobalProtect portals, gateways, HIP checks, and split tunnel design.
- Write ZTNA access policy and explicit proxy configuration.
- Configure CASB and DLP controls where the engagement includes them.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Zappsec Inc.
Growth Marketing & Revenue Operations Manager, Cloud AI Security
, IND
SeniorFull-time
Discovered 2 weeks agoView →
Senior Kubernetes and Open Source Platform Engineer
, IND
Discovered YesterdayFull-time
Growth Marketing & Revenue Operations Manager, Cloud AI Security
, IND
Discovered 2 weeks agoFull-time
Citrix & Azure Virtual Desktop Architect
, IND
Discovered 2 weeks agoFull-time
Director, AI Execution & Business Operations
, IND
Discovered 2 weeks agoFull-time