Palo Alto Network Engineer - L3

Job summary

Plan and deliver Palo Alto firewall migrations, upgrades, deployments, policy optimization, and security hardening, while supporting VPN, GlobalProtect, NAT, routing, and production troubleshooting. Monitor firewall health and security incidents, conduct audits, collaborate with infrastructure, cloud, and security teams, and maintain technical documentation and procedures.

Job details

Position: Palo Alto Network Engineer - L3- Bilingual Location: Montreal, QC-3 days in office Term: Full Time Key Responsibilities •Plan, design, and execute Palo Alto Firewall migration and upgrade projects. •Perform firewall policy review, rule optimization, and security hardening. •Manage firewall deployments, configuration changes, and troubleshooting activities. •Support VPN, GlobalProtect, NAT, routing, and security policy configurations. •Monitor firewall health, performance, and security incidents. •Provide L2/L3 support for production network security issues. •Conduct firewall audits and ensure compliance with security standards. •Collaborate with infrastructure, cloud, and security teams during migrations and transformations. •Create and maintain technical documentation, runbooks, and standard operating procedures. Required Skills •5+ years of hands-on experience with Palo Alto Networks firewalls. •Strong experience in firewall migration, implementation, and support. •Expertise in Panorama, GlobalProtect, IPS/IDS, URL Filtering, and Threat Prevention. •Strong understanding of TCP/IP, Routing, NAT, VPNs, and network security principles. •Experience troubleshooting complex firewall and connectivity issues. •Excellent communication and stakeholder management skills. Preferred Certifications •PCNSA (Palo Alto Networks Certified Network Security Administrator) •PCNSE (Palo Alto Networks Certified Network Security Engineer) Experience •8-10 years in Network Security / Firewall Engineering. •Experience in large enterprise firewall migration programs is highly preferred.

What you’ll do

Plan and deliver Palo Alto firewall migrations, upgrades, deployments, policy optimization, and security hardening, while supporting VPN, GlobalProtect, NAT, routing, and production troubleshooting. Monitor firewall health and security incidents, conduct audits, collaborate with infrastructure, cloud, and security teams, and maintain technical documentation and procedures.

Requirements

Requires at least five years of hands-on Palo Alto Networks firewall experience, with strong expertise in migration, implementation, support, Panorama, GlobalProtect, and related security technologies. The posting seeks 8–10 years in network security or firewall engineering, strong TCP/IP and network security knowledge, complex troubleshooting ability, and excellent communication; PCNSA and PCNSE certifications are preferred.

Listed skills

• NAT · Preferred
• TCP/IP · Preferred
• VPN · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Palo Alto Networks Firewalls
• Firewall Migration
• Firewall Implementation
• Firewall Policy Optimization
• Panorama
• GlobalProtect
• VPN
• NAT
• Routing
• IPS/IDS
• URL Filtering
• Threat Prevention
• TCP/IP
• Network Security
• Firewall Troubleshooting
• Security Compliance

Job areas

• Technology
• Security & Safety
• Engineering

More jobs from Epsilon Solutions Ltd.