Associate Border Security Analyst II

Job description

Working in the Border Security operations space, the Associate Border Security Analyst performs the day-to-day operations on Firewalls, IPS and IDS platforms and Zscaler. Responsibilities: Perform day-to-day operational support of global network security infrastructure, including Palo Alto Networks firewalls, Panorama, Zscaler ZIA, ZPA, ZCC, Tufin and VPN technologies. Implement firewall and network security policy changes in accordance with established change-management, security, and operational procedures. Create, modify, troubleshoot, and remove firewall security policies, NAT policies, objects, services, and related configurations. Troubleshoot complex firewall, VPN, Zscaler, and network connectivity issues using firewall logs, traffic analysis, packet captures, and other diagnostic tools such as Tufin. Provide technical support for escalated network security incidents and problems, including identification of root cause and implementation of corrective actions. Monitor network security infrastructure and proactively identify configuration, performance, connectivity, and security issues. Work closely with network engineering, infrastructure, application, cloud, and security teams to resolve cross-functional technical issues. Participate in firewall and network security upgrades, migrations, maintenance activities, and technology implementations as required. Maintain accurate technical documentation, operational procedures, and configuration records related to network security infrastructure. Participate in after-hours, weekend, and emergency support activities as required to maintain the availability and security of global network services. Required: Bachelor’s Degree plus 2 years of related experience; Or Master's Degree with 0 years' experience. Respective years of experience in network engineering, network security, or firewall operations. Strong hands-on experience with Palo Alto Networks firewalls, including firewall policy creation, modification, troubleshooting, and maintenance. Experience with Palo Alto Panorama and centralized firewall management. Hands-on experience with Zscaler, preferably including ZIA, ZPA, and Zscaler Client Connector (ZCC). Strong understanding of TCP/IP networking, routing, NAT, DNS, VPN technologies, and network security concepts. Demonstrated ability to troubleshoot firewall policies, connectivity issues, VPN issues, and firewall infrastructure problems. Experience working within formal ITIL/change-management processes and enterprise change-control environments. Ability to analyze firewall logs, traffic flows, and other network/security data to identify root causes. Strong verbal and written communication skills, including the ability to explain technical issues and solutions to technical and non-technical audiences. Ability to work independently, prioritize competing operational issues, and participate in extended hours and/or weekend support when required. Preferred: ​​5+ years of experience in network engineering, network security, or firewall operations. Palo Alto Networks certification such as PCNSA, PCNSE, or PCSAE. CCNA or CCNP certification. CISSP certification. Experience supporting large global enterprise environments. Experience with firewall automation, APIs, Python, or other scripting technologies.