Key Responsibilities

• Perimeter Build-Out: Design and deploy Palo Alto firewalls (including HA pairs) at new PoP locations, configuring zones, routing, NAT, and core threat prevention suites.
• Panorama Management: Configure device groups, template stacks, and enforce strict role-based access control (RBAC) for entity administrative separation.
• Policy Separation & Cleanup: Analyse legacy rulebases, migrate retained-entity policies, and cleanly remove residual cross-entity access from divested infrastructure.
• Collaboration & Automation: Partner with routing and Zscaler teams on traffic flows while utilizing Terraform, Ansible, and Git for firewall-as-code delivery.

Required Skills & Experience

• Palo Alto Expertise: Deep hands-on experience with Palo Alto NGFWs, Panorama management, SSL/TLS decryption, and GlobalProtect VPNs.
• Network Security Architecture: Strong command of zone-based firewalls, micro-segmentation, HA deployments, routing integration (BGP/OSPF), and public IP management.
• Migration & Separation: Proven track record of executing detailed firewall migration, policy rationalisation, and rigid change management cutover plans.
• Automation & DevOps: Daily experience with Git/GitHub, structured data (JSON/YAML), Terraform (PAN-OS provider), and basic Python scripting for automation pipelines.
• Identity & Cloud: Familiarity with User-ID integration, Cisco ISE, and hybrid cloud security architectures (AWS/Azure/GCP).
•