Security Engineer

Role purpose Provide hands-on engineering, administration and L3 support for Prisma Access and Palo Alto perimeter and data-centre firewalls. Implement and maintain approved Zero Trust access and firewall controls, coordinating with the MSSP SOC, IT teams and business/application owners. Key responsibilities Platform administration: Manage Prisma Access, PAN-OS firewalls and the applicable Panorama/Strata Cloud Manager environment, including configuration, health, upgrades, backups and high availability. Zero Trust implementation: Configure and tune user/application-based access, segmentation, remote access, device-posture requirements, service connections and ZTNA connectivity according to approved designs. Firewall control engineering: Maintain security/NAT policies, App-ID, User-ID, threat prevention, URL filtering, approved decryption and VPN controls; review rule usage, excessive access and configuration drift. L3 troubleshooting and SOC coordination: Resolve routing, connectivity, policy and performance issues; support MSSP investigations and log integration; coordinate approved containment, changes and recovery with IT teams. Platform hardening and policy compliance: Harden Prisma Access, PAN-OS firewalls and Panorama/Strata Cloud Manager against CIS benchmarks and ATG security policy requirements; track deviations, remediate gaps and keep evidence for audits. SIEM, SOAR and Power BI integration: Integrate platform logs and alerts with the SIEM and SOAR for detection and automated response playbooks; build and maintain Power BI dashboards for availability, policy hygiene and risk reporting. Incident resolution and virtual patching: Work with the MSSP SOC team to triage and resolve security incidents; apply virtual patching (Threat Prevention/vulnerability protection signatures and targeted rules) to mitigate exposure until vendor patches are deployed. Compliance and reporting: Maintain designs, rule justifications, change/rollback plans, audit evidence and support runbooks; provide weekly progress and monthly availability, policy-hygiene, risk and remediation reports. Delivery expectations Maintain an agreed task backlog, timesheets, configuration evidence and knowledge transfer. Implement changes only with approval, tested rollback and documented business-impact assessment. Operate within approved response authority and comply with all ATG policies and standards.

Desired Candidate Profile

Qualifications and skills Bachelor s degree in Engineering, preferably Computer, Information Technology, Electronics/Telecommunications or a related engineering discipline. 5 6 years of relevant network-security experience, with hands-on Prisma Access and Palo Alto firewall administration. Strong TCP/IP, routing, DNS, IPsec, TLS, HA and identity-integration skills; experience with enterprise change control, SIEM troubleshooting and vendor escalation. Security hardening using CIS benchmarks and enterprise policy-compliance assessment, with configuration baselining and audit evidence. SIEM and SOAR integration (syslog/CEF, log forwarding, APIs, playbooks) and Power BI reporting or dashboard development. Incident response and threat analysis with an MSSP SOC, including virtual patching, vulnerability-protection signatures and CVE/threat-intelligence triage. Relevant certification: Palo Alto Networks Certified Next-Generation Firewall Engineer or Certified Security Service Edge Engineer; both preferred (NGFW certification, SSE certification).