Network Security Engineer III

Summary

Join our team as a Network Security Engineer III and participate in a large-scale firewall migration project. Transition firewalls from Cisco ASA to Cisco Firepower and Palo Alto Next-Gen Firewalls. Execute migration activities, validate configurations, and support post-migration troubleshooting. Collaborate with technical leads and other engineers. This is a remote, full-time position requiring 7-12 years of experience.

Requirements

• Hands-on experience with: Cisco ASA Cisco FTD/Firepower Palo Alto NGFW (including 1410, VM-Series, VSYS) Palo Alto NGFW (VSYS, Panorama, Expedition, Migration Manager)
• Strong command of: Cisco ASA- ACL, VPN setup (IPSec/SSL), AnyConnect, HA Setup,NAT, Policy Management, OS Upgrade. Palo Alto- VPN setup (IPSec/SSL), Global protect, HA Setup, NAT, Policy Management, PANOS Upgrade. Routing protocols (Static, OSPF, BGP) and switching fundamentals
• Experience in ASA to Palo Alto / Firepower config conversion
• Familiarity with tools like Expedition, Migration Manager, or similar
• Solid troubleshooting and packet capture analysis skills
• Excellent interpersonal and communication skills – able to clearly articulate ideas, processes, and technical concepts to both technical and non-technical audiences
• Strong documentation abilities – capable of creating and maintaining clear, concise technical documentation and procedures
• Flexible, proactive, and self-driven – demonstrates initiative, reliability, and adaptability in dynamic environments

Responsibilities

• Participate in the migration and config conversion of: ASA → Palo Alto (1410 VSYS, 1410 Single Tenant & VM-Series) ASA → Cisco Firepower with ASA Code or FTD
• Perform configuration conversion using tools and manual methods
• Configure and validate: NAT policies (Static, Dynamic) Site-to-Site VPNs and Client-to-Site VPNs (AnyConnect/Global Protect) Firewall Policies, HA, SSL VPNs, NextGen features (IPS/IDS)
• Strong knowledge of change/Incident management process
• Conduct pre- and post-migration validation
• Support change windows, participate in troubleshooting during cutovers
• Document configurations and migration steps
• Collaborate with L4 engineers and stakeholders during complex migrations

Preferred Qualifications

• Cisco Certifications: CCNP Security / CCNP R&S
• Palo Alto Certifications: PCNSA/PCNSE