What are the responsibilities and job description for the Palo Alto Firewall Engineer position at PeakIT?
Job Details
Palo Alto Firewall Engineer
Location: San Diego, CA (Local candidates only) volume of onsite work may vary, travel to sites as needed
Work Locations: Century Park / Rancho Bernardo/Metropolitan area in San Diego, CA.
Role Overview:
We are seeking a Firewall Engineer with a strong background in Palo Alto Networks firewalls and networking technologies to join our team in the San Diego metropolitan area. This role will focus on Operational Technology (OT) environments, supporting the design, implementation, and management of secure networking solutions in compliance with NERC-CIP standards. The ideal candidate will work on building out a robust support model for firewall management and NERC-CIP compliance while contributing to OT-related projects.
Key Responsibilities:
- Design, configure, and manage Palo Alto Networks firewalls to ensure secure and reliable network operations.
- Support NERC-CIP compliance efforts, including documentation, reporting, and audit readiness.
- Drive resolution of complex technical issues related to network firewalls and OT systems.
- Collaborate with cross-functional teams to implement and maintain OT controls, ensuring effective monitoring and management of physical equipment.
- Support networking solutions, including Cisco ASA, F5 Load Balancers (LTM, APM, GTM), and DNS/DHCP configurations.
- Implement and manage security tools and protocols, including NAC, AAA, and Cisco ISE.
- Provide ongoing support for firewall and network infrastructure, ensuring high availability and performance.
- Assist in building a support model to streamline operations and incident resolution.
Skills and Qualifications:
- NERC-CIP certification (mandatory). ( If candidate does not have certification, we will provide training on day 1 to become certified).
- Proven experience as a Firewall Engineer with expertise in Palo Alto Networks.
- Solid understanding of OT environments and their unique security requirements.
- Hands-on experience with Cisco ASA firewalls and F5 Load Balancers.
- Strong knowledge of DNS/DHCP, NAC, AAA, and Cisco ISE.
- Ability to troubleshoot and resolve complex networking issues efficiently.
- Familiarity with security compliance frameworks and operational controls.
- Excellent communication skills to coordinate with technical and non-technical stakeholders.
Preferred Qualifications
- Prior experience in the utility or energy sector is a plus.
- Knowledge of OT-related controls and physical equipment monitoring systems.
- Familiarity with other networking tools and technologies beyond listed qualifications.
