Cybersecurity Firewall Analyst II (Prisma-SASE-Palo)

Location: Charlotte, NC

Work Arrangement: Hybrid

Travel: 5–10%Conversion: Candidates must be eligible to convert to a permanent position.

Position Summary: We are seeking a Cybersecurity Systems Engineering Analyst to support and engineer enterprise cybersecurity platforms within a large-scale, highly regulated environment. This role will focus heavily on Palo Alto Networks Secure Access Service Edge (SASE) technologies, including Prisma Access, GlobalProtect, and Strata Cloud Manager, while maintaining integration with legacy inspection and proxy technologies such as F5 BIG-IP and secure web proxy solutions. The Analyst will work closely with Cybersecurity, IT, Network Engineering, Security Operations, Incident Response, and business stakeholders to maintain secure, resilient, and highly available environments. This is a hands-on engineering role within a 247 Cybersecurity Operations Center (CSOC) environment, with responsibility for security controls, monitoring, policy enforcement, system hardening, lifecycle management, and continuous improvement.

Key Responsibilities: Implement, support, and manage the lifecycle of Palo Alto Networks SASE solutions, including Prisma Access, GlobalProtect, and Strata Cloud Manager. Maintain integration between SASE platforms and Inspection Zone technologies, including F5 BIG-IP and SWG/Proxy environments. Design, deploy, and optimize cloud-delivered security controls, including SWG, CASB, ZTNA, DNS Security, and threat prevention capabilities. Provide advanced engineering support for SASE and inspection-zone security platforms. Partner with Security Operations, Network Engineering, and Incident Response teams to troubleshoot and resolve complex security and connectivity issues. Drive security monitoring, telemetry integration, and policy enforcement across cloud-based and on-premises security environments. Perform system hardening, high-availability design, resilience engineering, and performance optimization. Develop and maintain failover strategies and service continuity plans for critical security platforms. Apply current threat intelligence and cybersecurity best practices to proactively reduce enterprise risk. Improve detection, response, threat hunting, and incident analysis capabilities using SASE telemetry and security data. Develop and report operational and security metrics, including policy effectiveness, threat prevention performance, and user activity visibility. Support modernization initiatives, including migration from legacy proxy and multi-vendor security environments to SASE platforms. Collaborate with cross-functional teams and leadership to align security engineering solutions with enterprise architecture and business objectives. Follow established cybersecurity processes, procedures, standards, and incident response requirements. Build strong relationships with technical teams, business stakeholders, and leadership while communicating technical risks and recommendations clearly. Required

Qualifications: Bachelor's degree in Cybersecurity, Information Security, Computer Science, Management Information Systems, or a related field.3+ years of cybersecurity or IT experience with a bachelor's degree. OR 4+ years of relevant cybersecurity/IT experience in lieu of a degree, including applicable military information security or systems administration experience. Hands-on experience supporting enterprise cybersecurity, network security, or security engineering environments. Experience working with complex enterprise infrastructure and security technologies. Ability to work effectively in a 247 operational/CSOC environment. Strong analytical, troubleshooting, communication, and collaboration skills. Preferred

Qualifications: Hands-on experience with Palo Alto Networks SASE / Prisma Access, including Mobile Users, Remote Networks, and Service Connections. Strong understanding of Security Service Edge (SSE) capabilities, including SWG, CASB, ZTNA, DNS Security, and SaaS security. Experience with security policy design, traffic steering, segmentation, and policy enforcement. Strong knowledge of networking concepts and protocols, including BGP, IPSec, routing, and NAT.Experience integrating SASE solutions with on-premises inspection environments and hybrid cloud architectures. Experience with GlobalProtect and remote access/VPN technologies. Experience with automation, APIs, scripting, or infrastructure-as-code, including Python and/or Terraform. Strong background in high availability, system hardening, resilience, and performance optimization. Experience supporting or leading legacy proxy-to-SASE migrations or other security platform modernization initiatives. Knowledge of cybersecurity frameworks and practices such as NIST, CIS, and Zero Trust. Industry certifications such as CISSP, CISA, CISM, GIAC/GCIA/GCIH/GCFA, or relevant network/security certifications are highly desirable.

Additional Information: Charlotte, NC location; no relocation assistance provided. Approximately 5–10% travel may be required. This position operates in an enterprise environment where security, availability, regulatory compliance, and operational resilience are critical. Candidates must be eligible to convert to a permanent position. To Apply for this Job Click HereEqual Employment Opportunity Statement Gravity IT Resources is an Equal Opportunity Employer. We are committed to creating an inclusive environment for all employees and applicants. We do not discriminate on the basis of race, color, religion, sex (including pregnancy, sexual orientation, or gender identity), national origin, age, disability, genetic information, veteran status, or any other legally protected characteristic. All employment decisions are based on qualifications, merit, and business needs.