Senior Firewall Engineer | Network Security Engineer

Job Description Job Summary: Our client is seeking an experienced Senior Firewall Engineer for a permanent, on-site role based in New York City, NY or Pittsburgh, PA. This position is critical to supporting an enterprise-level Palo Alto firewall refresh initiative, focusing on the planning and execution of firewall migrations while ensuring minimal disruption to production environments.

Hourly Rate: $60.00 $75.00 per hour (W-2). Annual Salary Equivalent: $63,168 $90,240 USD.

Core Responsibilities: Plan and execute enterprise-level Palo Alto firewall migration activities. Migrate firewall policies, security rules, and configurations to new infrastructure. Validate firewall functionality and network connectivity post-migration. Collaborate with network engineering teams to support routing, switching, and security policy changes. Troubleshoot firewall and network connectivity issues during implementation. Participate in formal change management and production deployment processes. Document all firewall configurations, migration steps, and implementation procedures.

Required Qualifications: Strong hands-on experience managing Palo Alto Firewalls. Proven experience performing enterprise firewall refreshes and complex migration projects. Deep understanding of firewall policies, NAT, security zones, and rule management. Intermediate to advanced knowledge of routing and switching protocols. Experience supporting large-scale enterprise production environments. Native or bilingual proficiency in English.

Preferred Qualifications: Experience with Cisco ASA firewalls. Experience working within strictly change-controlled production environments. Relevant industry certifications, including: Palo Alto Networks Certified Network Security Engineer (PCNSE). CCNP Security or CCNP Enterprise. CCIE Security.