Infinity Labs - Security Consultant - Palo Alto Firewall

Description : Key Responsibilities : - Deploy, configure, and manage Palo Alto NGFWs and cloud-delivered security services, including Prisma Access, GlobalProtect VPN, and Panorama / Strata Cloud Manager, from scratch. - Design, implement, and operate Prisma Access architectures for mobile users, remote networks, and service connections, ensuring secure and scalable connectivity. - Provide expert-level troubleshooting of network and security issues across on-prem and cloud environments, including packet flow, NAT, QoS, and IPSEC VPN within Prisma Access. - Conduct advanced analysis using tools like Wireshark and Prisma Access logs to diagnose and resolve security and connectivity challenges. - Design and implement VPN solutions (SSL, IPSEC), including Prisma Access remote access and branch connectivity scenarios. - Collaborate with clients to understand business and security requirements and provide optimal SASE-based security solutions using Prisma Access. - Configure and troubleshoot authentication flows (SAML, LDAP) and manage certificates (PKI) for Prisma Access and GlobalProtect deployments. - Explain and apply concepts related to OSI layers, TCP/IP, IP subnetting, and routing protocols (BGP) in solutioning and troubleshooting Prisma Access service connections. - Utilize Strata Cloud Manager and Panorama for centralized policy management, visibility, and operational workflows. - Provide training and knowledge transfer on Prisma Access, Strata Cloud Manager, and Palo Alto firewall capabilities to customers and internal teams. Required Skills : - Strong understanding of OSI model, TCP/IP, and packet flow analysis. - Hands-on experience with Palo Alto NGFWs and Prisma Access, including GlobalProtect VPN and centralized management via Panorama / Strata Cloud Manager. - In-depth knowledge of Prisma Access architecture, VPN technologies (SSL, IPSEC), NAT, and QoS. - Proficiency in troubleshooting using Wireshark, Prisma Access logs, and Palo Alto diagnostic tools. - Expertise in SAML and LDAP authentication flows for cloud and remote access security. - Solid understanding of DNS, HTTP, SSL/TLS, FTP, and cloud networking fundamentals. - Strong logical and systematic troubleshooting skills across hybrid and cloud environments. - Ability to design, implement, and manage secure, scalable SASE and firewall solutions in complex enterprise environments. .