Security Network Architect – Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, implement, and maintain the infrastructure of Palo Alto Networks NGFW across both on-premises and Azure environments.

• Architect and oversee site-to-site VPN and dynamic routing (BGP/OSPF) connections among regional offices, data centers, and Azure VNets.

• Configure and facilitate GlobalProtect for secure remote user access, including route redistribution into BGP/OSPF.

• Design and manage Azure networking components: VNets, VNet peering, ExpressRoute, VPN Gateway, Route Tables, and NSGs.

• Develop and sustain a multi-region connectivity architecture that links offices across three continents while enforcing a consistent security policy.

• Manage centralized policy and logging through Panorama across all locations.

• Take ownership of BGP routing design and troubleshooting between Palo Alto virtual routers and Azure/ExpressRoute circuits.

• Support network segmentation and the design of Zero Trust security zones across cloud and branch environments.

• Ensure that the multi-region connectivity architecture is stable, well-documented, and consistently applied.

• Troubleshoot routing issues and maintain clean BGP peering between Palo Alto and Azure/ExpressRoute.

• Ensure a consistent security policy and logging via Panorama across all sites.

⛳️ Requirements

• A minimum of 5 years of hands-on experience with Palo Alto Networks firewalls (PAN-OS), including expertise in Panorama management.

• Strong knowledge of GlobalProtect architecture, including portal/gateway design, IP pools, split tunneling, and redistribution.

• Solid understanding of BGP (route redistribution, filtering, multi-homed peering); knowledge of OSPF is a plus.

• Proven experience with Microsoft Azure networking, specifically VNets, ExpressRoute, VPN Gateway, NSGs, and Route Tables.

• Experience in designing and supporting multi-region WAN/VPN architectures across various continents.

• Familiarity with IPSec VPN design, GRE tunnels, and hub-and-spoke topologies.

• Experience in supporting distributed teams across US, EU, and Asia time zones.

• Strong troubleshooting capabilities using CLI (PAN-OS), packet captures, and routing table analysis.

• PCNSE certification is a plus.

• Microsoft Certified: Azure Network Engineer Associate is a plus.

• CCNP / JNCIP or equivalent routing/switching certification is a plus.

• Familiarity with SD-WAN concepts and technologies is a plus.

• Experience with Juniper products is a plus.

🏝️ Benefits

• Fully remote engagement.