Senior Network Security Engineer

Job Description

Senior Network Security Consultant (Juniper SRX to Palo Alto NGFW Migration) | Denver, CO | 12+ Month Contract

\n

Location: Denver, CO (100% Onsite)

\n

Duration: 12 Months Contract (Strong Possibility of Extension)

\n

Employment Type: W2 Only

\n

\n

About the Opportunity

\n

We are seeking an experienced Network Security Consultant / Palo Alto SME to support a major firewall transformation initiative for a leading enterprise customer. This is not a traditional firewall administration role.

\n

The primary focus of this engagement is the migration of Juniper SRX environments to Palo Alto Networks Next-Generation Firewalls (NGFW). The ideal candidate will have deep expertise in both Juniper and Palo Alto technologies and be comfortable leading migration activities, firewall redesign, cutovers, optimization, and post-migration support.

\n

\n

What You'll Be Doing

\n

\n
• Lead migration efforts from Juniper SRX to Palo Alto NGFW

\n

• Analyze and translate existing Juniper configurations into Palo Alto best practices

\n

• Design and implement security policies, NAT policies, Application-ID, User-ID, and Content-ID

\n

• Support firewall deployment, routing integration, and security optimization

\n

• Participate in maintenance windows, migration cutovers, and rollback planning

\n

• Optimize performance, sizing, capacity planning, and operational workflows

\n

• Collaborate directly with customer engineering and leadership teams

\n

• Mentor customer teams on Palo Alto operational best practices following migration

\n

\n

Required Skills

\n

✅ Strong hands-on experience with Palo Alto NGFW and Panorama

\n

✅ Experience with Juniper SRX Firewall Administration and Migration Projects

\n

✅ Expertise in:

\n

\n
• Application-ID

\n

• User-ID

\n

• Content-ID

\n

• NAT

\n

• VPN

\n

• SSL Decryption

\n

• Threat Prevention

\n

• WildFire

\n

• URL Filtering

\n

\n

✅ Strong networking knowledge:

\n

\n
• TCP/IP

\n

• BGP

\n

• OSPF

\n

• IS-IS

\n

• MPLS

\n

• EVPN/VXLAN

\n

• Route Redistribution

\n

• ECMP

\n

\n

✅ Experience leading firewall migration and cutover activities

\n

Preferred Skills

\n

\n
• Service Provider Environment Experience

\n

• Cloud Security Integrations (AWS, Azure, GCP)

\n

• SD-WAN Exposure

\n

• Cortex Data Lake or Expedition

\n

\n