Job Description

Network Security Engineer – Palo Alto (Divestiture Connectivity Elimination)Role Summary

We are hiring two Network Security Engineers to support a divestiture program focused exclusively on eliminating network connectivity for a business entity. The role is execution-focused and limited to disconnection, decommission, and handover activities across Palo Alto NGFW, Panorama, Strata Cloud Manager (SCM), and Prisma Access.
This role does not include modernization, optimization, or platform enhancements.

Key Responsibilities Palo Alto NGFW & Panorama (Connectivity Removal)

• Identify and remove firewall rules, objects, routes, and NATs related to the divested entity.

• Decommission Palo Alto NGFWs from Panorama, including:

• Device groups

• Templates / template stacks

• Log forwarding and collectors

• Validate zero residual connectivity post-removal.

Strata Cloud Manager & Prisma Access (Separation Scope Only)

• Remove or update Prisma Access security policies tied to the divested business.

• Perform Remote Network (RN):

• Removal

• Disconnection

• Configuration cleanup

• Validate that no traffic from the divested entity transits Prisma Access.

Decommission & Handover

• Execute formal firewall decommission procedures.

• Support handover to the divested entity, including:

• Confirmation of separation

• Coordination with Palo Alto Customer Support Portal for device/support disposition

• Ensure all decommission actions are documented and auditable.

Required Qualifications (Must Have)

• 8+ years in Network Security / Firewall Engineering (or equivalent).

• Hands-on experience with Palo Alto NGFW operations in enterprise environments.

• Strong hands-on experience with Panorama management (templates/device groups/commit-push, lifecycle tasks).

• Hands-on experience with Strata Cloud Manager (SCM) for centralized management of NGFW and/or Prisma solutions.

• Hands-on experience configuring Prisma Access through SCM, including security policy and Remote Networks administration.

• Ability to execute firewall decommissioning and related operational clean-up.