Security Engineer

Micro Data Systems - San Francisco, CA

Full-time

San Francisco, CA

Professional, Scientific, and Technical Services

About the position

The Security Engineer role focuses on migrating customers from legacy firewall technologies to Palo Alto Networks platforms, building custom security policies, and providing ongoing support and troubleshooting. The position requires a strong technical background in networking and security, with responsibilities that include maintaining the company's solutions and ensuring client needs are met in a timely manner.

Responsibilities

• Migrate customers from legacy firewall technologies to Palo Alto Networks platforms
• Build custom security policies and application signatures configured for client needs
• Maintain proficiency and increase knowledge on Palo Alto Networks SASE products, software, and services
• Provide after hours and weekend on-call support as needed for maintenance activities
• Analyze logs and events for initial troubleshooting and issue identification
• Work with the Technical Assistance Center to troubleshoot and diagnose support cases
• Maintain the company's solution and provide mentorship on code upgrades and best practices
• Ensure client needs are met and deliverables produced on time according to specified project deliverables and scope

Requirements

• 4+ years' experience in professional services or similar function
• BS/MS in Computer Science, Electrical Engineering, Computer Engineering or a related technical field, or equivalent background
• Detailed technical experience in the installation, configuration, and operation of high-end firewall appliances
• Strong understanding of LAN and WAN networking protocols and technologies
• Strong TCP/IP networking skills
• Strong dynamic routing skills (BGP, OSPF, etc.)
• Experience with Remote Access VPN solutions, IPSEC, PKI & SSL, TCP/IP, Authentication Protocols (LDAP, RADIUS, SAML, etc.)
• Experience with URL filtering
• Experience with Proxy and SSL Decryption
• Experience with Windows and MAC OS including debugging and editing Windows Registries, Plist, etc.
• Experience with Palo Alto Networks NGFW, Cisco, Checkpoint, Juniper (Netscreen), Fortinet products, Symantec/ Blue Coat, Zscaler
• Good troubleshooting skills and ability to use tools like tcpdump & Wireshark
• Good written and verbal communication skills
• Demonstrated ability to work in a cross-functional environment
• Attention to detail, fast learner, and excellent communication skills
• Project leadership experience; ability to drive organizations and resources to complete required tasks
• Possess one or more industry certifications: PCNSE, CCNA/CCNP/CCIE
• Application Delivery expertise L7 SLB / Global SLB / Traditional Link LB
• Application Performance Monitoring expertise
• Packet capture analysis / fault isolation and remediation
• In-depth knowledge and deployment experience of SD-WAN and Remote Access technologies
• Network Security expertise (IPS/IDS, ZBFW, NGFW)
• In-depth IP Routing protocol expertise (BGP, OSPF, EIGRP)
• Implementation of Legacy WAN solutions (MPLS, Leased Line, Frame Relay, Satellite, Internet VPN, ECMP, DMVPN)
• Global-scale network design
• Demonstrable Virtualization experience (VMware/Microsoft/Citrix/Linux)