Kyndryl

Senior Security Engineer – Palo Alto Strata Firewalls, Migration Specialist

Kyndryl

full-time

Posted on:

Location Type: Remote

Location: United States

Visit company website

Explore more

AI Apply
Apply

Salary

💰 $138,480 - $263,160 per year

Job Level

Tech Stack

About the role

  • Lead end‑to‑end migrations from legacy firewall platforms to Palo Alto Strata NGFW.
  • Perform pre‑migration assessments, rule analysis, and configuration transformations using tools such as Expedition.
  • Design and implement clean, optimized Palo Alto configurations.
  • Execute cutovers, validate traffic flows, and provide post‑migration stabilization support.
  • Analyze and rationalize existing firewall rulebases to eliminate redundancies, unused rules, and excessive access.
  • Tune Threat Prevention, URL filtering, and WildFire to improve detection and reduce risk.
  • Troubleshoot complex network and security issues across Layers 3–7.
  • Support firewall upgrades, best‑practice checks, and ongoing optimization initiatives.
  • Develop and maintain deployment documentation, runbooks, and standardized Methods of Procedure (MOPs).

Requirements

  • 5+ years of experience in network and security engineering with strong hands‑on expertise in Palo Alto NGFW / Strata Firewalls
  • Proven experience performing firewall migrations and rulebase optimization in enterprise environments.
  • Strong understanding of routing, NAT, VPNs, segmentation, and Layer 7 security controls.
  • Hands‑on experience with Panorama, Expedition, and Palo Alto Best Practice Assessments.
  • Solid understanding of Zero Trust concepts and modern security architectures.
Benefits
  • medical and dental coverage
  • disability
  • retirement benefits
  • paid leave
  • paid time off
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools
Palo Alto NGFWfirewall migrationsrulebase optimizationroutingNATVPNssegmentationLayer 7 security controlsThreat PreventionURL filtering