Senior Security Engineer

*****NO C2C OR THIRD PARTY INQUIRIES*****

Scroll down to find the complete details of the job offer, including experience required and associated duties and tasks.
Senior Security Engineer
Location: Denver, CO – 3x Per Week OnsiteSalary Range: $120k - $140k
The Professional Services Consultant (SASE) is an expert with a strong understanding of network security, Palo Alto Networks firewalls, GlobalProtect, and Prisma Access. The Professional Services Consultant knows how to implement, optimize, and operate SASE Platforms.
This is a highly technical role with a focus on large scale Prisma Access deployments. The Extended Expertise Consultant will develop, maintain and leverage expertise on SASE Platforms and the relevant tools that can be used to optimize the deployment and operation of the Platforms.
BS in Computer Science or equivalent education/training/experiencePrisma Access Experience: Proven track record configuring and supporting enterprise Prisma Access deployments—including Remote Networks and Mobile Users—with hands-on expertise implementing core security services such as SSL Decryption and Data Loss Prevention (DLP).4+ years of remote user access technologies, including IPSec VPN, SSL VPN, Explicit Proxy, ZTNAExperience with SD-WAN Architectures and providersTunneling protocols such as SSL/TLS, IPSec, GREAuthentication methodologies, including: 2FA, SAML, RADIUS, LDAP,TACACS, CertificatesDirectory Services, including: OKTA, Active Directory, Azure ADFS.Strong Routing Skills, including: BGP, Redistribution to other routing protocols, Static Routing, Traffic Steering, PBF.Next-Generation Firewall capabilities, configuration, and deployment. Including Panorama, User-ID, App-ID, Threat Prevention, URL Filtering, CASB, DLP, SSL Decryption.Experience deploying and configuring SD-WAN technologies, preferably Prisma SD-WAN (Formerly CloudGenix) and PanOS native environmentsExperience identifying and executing on opportunities where automation can be used to optimize the deployment and operation of Palo Alto Networks SASE products in on-premise, and public cloud models.Ability to work within small creative teams as well as cross-functional teamsExcellent written and verbal communication skills
Your ImpactMigrate customers from legacy remote access technologies to Palo Alto Networks platformsBuild custom security policies and application signatures, configured for our client’s needsProgress and uphold expertise in deploying advanced Palo Alto Networks features and functionalityProvide after hours and weekend on-call support, as needed, to support maintenance activitiesAnalyze logs and events from the solution to perform initial troubleshooting and issue identificationWork with our Technical Assistance Center to troubleshoot and diagnose support casesMaintain the Company's solution and provide mentorship on code upgrades and best practicesEnsure client needs are met and deliverables produced on time according to specified project deliverables and scopeTravel is required in the scope of your duties. It can be heavy but we believe in a work/life balance and will do our best to ensure project travel is minimized when possible.
Your ExperienceExperience with network, security solutions, remote access and remote connectivity technologies in large environments.Experience with troubleshooting skills related to networking, routing, IP, NAT, IPSEC VPNs and knowledge of how these interact with applications and usersExperience with installation, configuration and operation of NGFW productsEffectively handle multiple projects and work calmly under pressureAn excellent writer, with strong verbal social skills, with demonstrated ability to communicate to senior leaders, technical peers, and non-technical partnersAbility to work with the customers security & network teams to build confidence across the business units impacted by the change with the addition Palo Alto NetworksExperience using of remote user access technologies, including IPSec VPN, SSL VPN, Explicit Proxy, ZTNExcellent written and verbal communication skillsDirector Customer Consulting ExperienceAuthentication methodologies, including: 2FA, SAML, RADIUS, LDAP CertificatesStrong RoutingSkills, including BGP and StaticRoutingNext-Generation Firewall capabilities, configuration, and deployment. xzbcwsv Including Panorama, User-ID, App-ID, Threat Prevention, URL Filtering, SSL Decryption.Ability to work within small creative teams as well as cross-functional teams