Remote Position
[Remote] Senior Network Engineer
🌍 Remote · United States
💼 Full-time
Note: The job is a remote job and is open to candidates in USA. CBTS is hiring a Senior Network Firewall Engineer to support a large-scale migration from Cisco AnyConnect to Palo Alto Prisma Access (GlobalProtect). The role leads hands-on VPN engineering and develops automation to make migration tasks repeatable, while setting technical standards and resolving complex issues.
Responsibilities
- Design, configure, and support Palo Alto Prisma Access and GlobalProtect VPN services
- Lead the technical execution of the phased migration of users and groups from Cisco AnyConnect to Palo Alto
- Design and develop Python and/or PowerShell automation for migration tasks, such as user and group onboarding, policy and configuration builds, validation checks, and reporting
- Automate recurring engineering tasks to reduce manual effort and errors
- Set standards for code quality, testing, and version control on the team’s automation
- Serve as an escalation point for complex connectivity, authentication, and policy issues
- Maintain firewall policies, security profiles, and configuration standards
- Mentor junior engineers and review their scripts and configurations
- Document designs, runbooks, and automation so the team can reuse them
- Partner with network, security, and service desk teams, and report on migration progress to stakeholders
Skills
- 7+ years of experience in network or firewall engineering
- Deep hands-on experience with Palo Alto Networks firewalls (Panorama, GlobalProtect, or Prisma Access)
- Working knowledge of Cisco AnyConnect or ASA/FTD VPN
- Proficiency in Python and/or PowerShell, with a record of building automation used in production
- Strong understanding of TCP/IP, routing, NAT, SSL/IPsec VPN, and network security fundamentals
- Experience with REST APIs and scripting against network or security platforms
- Strong troubleshooting and written communication skills
- Palo Alto certification (PCNSE preferred)
- Experience leading large-scale VPN or remote access migrations
- Familiarity with SAML/SSO, MFA, and identity integrations (Azure AD/Entra ID, Okta)
- Experience with Git, CI/CD, or infrastructure-as-code practices
- Prior experience in an enterprise or managed services environment
Benefits
- Fully virtual position.
Company Overview
Company H1B Sponsorship