Senior Information Security Engineer

Title: Senior Information Security Engineer

Location: San Jose, CA (Hybrid)

Type: Contract

Specialization: Network Security, Zero Trust, SASE, Firewall Engineering, Cloud Security.

Overview:

• We are seeking an experienced Senior Security Engineer to design, implement, manage, and optimize enterprise network security infrastructure with a strong focus on Palo Alto Networks NGFW, Panorama, Strata Cloud Manager (SCM), and Zscaler (ZIA/ZPA) technologies. The ideal candidate will serve as a senior technical resource responsible for securing enterprise networks, cloud environments, remote access, and Zero Trust architectures while ensuring operational excellence and compliance with security standards.
• The role requires hands-on expertise in enterprise security operations, firewall policy management, threat prevention, cloud security, secure remote access, and troubleshooting complex network security issues. Experience with Palo Alto centralized management platforms including Panorama and Strata Cloud Manager, along with Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA), is essential.

Key Responsibilities

Palo Alto Firewall Management

• Design, implement, and support Palo Alto Networks Next-Generation Firewalls across data center, branch, cloud, and perimeter environments.
• Administer and troubleshoot security policies, NAT, routing, VPN, App-ID, User-ID, SSL Decryption, URL Filtering, DNS Security, WildFire, and Threat Prevention profiles.
• Perform firewall upgrades, migrations, hardware refreshes, and high-availability (HA) deployments.
• Conduct firewall rule reviews, policy optimization, and security audits.
• Lead incident troubleshooting and root cause analysis for network security incidents.
• Panorama & Strata Cloud Manager (SCM)
• Manage large-scale firewall environments using Panorama and Strata Cloud Manager.
• Develop centralized policy management and security governance standards.
• Implement security posture recommendations and compliance frameworks.
• Manage device onboarding, logging services, policy consistency, and operational visibility.
• Utilize SCM policy analyzer and posture management features to improve enterprise security posture.
• Zscaler Administration
• Design, deploy, and administer Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) solutions.

Configure and manage:

• ZPA Application Segments
• App Connectors
• Service Edges
• Access Policies
• Browser Access
• ZIA Security Policies
• SSL Inspection
• Cloud Firewall
• Data Protection Controls
• Support Zero Trust architecture initiatives.
• Troubleshoot Zscaler-related connectivity, authentication, and application access issues.
• Perform migrations from traditional VPN platforms to ZPA-based secure access solutions.
• Network Security Operations
• Monitor and respond to security incidents and vulnerabilities.
• Participate in major incident management and crisis response.
• Conduct threat hunting and security investigations utilizing firewall and proxy logs.
• Develop security standards, operational procedures, and engineering documentation.
• Collaborate with SOC, Cloud, Infrastructure, and Application teams to implement security controls.
• Support security compliance initiatives including NIST, CIS, ISO 27001, and regulatory requirements.
• Cloud & Security Integration
• Secure Azure and AWS workloads using Palo Alto and cloud-native controls.
• Deploy and manage VM-Series firewalls in public cloud environments.
• Integrate security platforms with SIEM and ticketing systems.
• Automate firewall and security operations using APIs, Python, PowerShell, or Terraform.

Required Qualifications:

• Experience
• 12+ years of experience in Network Security and Security Engineering.
• 10+ years of hands-on experience with Palo Alto Networks firewalls.
• 10+ years of experience managing Panorama environments.
• Hands-on experience with Palo Alto Strata Cloud Manager.
• + years of experience supporting Zscaler ZIA and ZPA deployments.
• Strong experience supporting enterprise-scale security operations.
• Technical Skills
• Palo Alto NGFW Administration
• Panorama Management
• Strata Cloud Manager (SCM)
• Palo Alto Logging Service
• Zscaler ZIA/ZPA
• SSL Decryption
• Threat Prevention
• WildFire
• DNS Security
• URL Filtering
• IPSec VPN
• Site-to-Site VPN
• Dynamic Routing (BGP, OSPF)
• NAT & Security Policy Management
• Zscaler Skills
• Zscaler Internet Access (ZIA)
• Zscaler Private Access (ZPA)
• Zscaler Client Connector (ZCC)
• Zero Trust Architecture
• Cloud Firewall
• SSL Inspection
• Application Segmentation
• Identity-Based Access Control
• Networking Skills
• TCP/IP
• DNS
• DHCP
• Routing & Switching
• VLANs
• IPSec
• BGP
• OSPF
• MPLS
• Network Segmentation
• Cloud Skills
• Microsoft Azure
• Amazon Web Services (AWS)
• Cloud Security Architecture
• SASE / SSE Platforms
• Preferred Qualifications
• PCNSE (Palo Alto Certified Network Security Engineer)
• Palo Alto Strata Cloud Manager Certification
• Zscaler Certified Administrator (ZCCA)
• Zscaler Certified Architect (ZCCA/ZCCA-IA)
• CISSP, CISM, or CCSP
• Experience with Infrastructure as Code (Terraform, Ansible).
• Scripting experience in Python or PowerShell
• Key Competencies
• Strong analytical and troubleshooting skills.
• Excellent communication and stakeholder management.
• Ability to lead security projects and major incidents.
• Strong understanding of Zero Trust and Secure Access Service Edge (SASE).
• Self-driven with the ability to work independently in a global enterprise environment.
• Experience mentoring junior engineers and driving security best practices