Palo Alto Lead Firewall Engineer, Wells Fargo

Wells Fargo

Location:
United States, Charlotte ▼
Chandler
Irving
Iselin
Minneapolis
West Des Moines

Category:
IT - Software Development

Contract Type:
Employment contract

Salary:

119000.00 - 224000.00 USD / Year

Save Job

Apply Position

Job Description:

We are looking for a skilled and driven Lead Firewall Engineer to join our team and contribute to the design, deployment, and ongoing support of secure, scalable network infrastructures. This role is ideal for professionals with a strong foundation in enterprise firewall technologies, particularly Palo Alto Networks and Fortinet, along with working knowledge of Cisco infrastructure products.

Job Responsibility:

Design, implement, and maintain secure network infrastructures using Palo Alto Networks, Fortinet, and Cisco routing and switching products
Lead and support firewall migration projects, including policy analysis, configuration translation, and deployment using tools such as Expedition, FortiConverter, SmartMove, and other vendor utilities
Build and deploy new network security infrastructures, including greenfield implementations and expansion of existing environments
Perform security policy reviews, rulebase optimization, and threat prevention tuning to align with best practices and compliance requirements
Troubleshoot and resolve complex network security issues across multi-vendor environments, ensuring minimal downtime and optimal performance
Collaborate with cross-functional teams (network, cloud, infrastructure, and application teams) to integrate security controls into enterprise architecture
Maintain accurate and up-to-date documentation, including network diagrams, configuration standards, and operational procedures
Monitor and respond to security events, alerts, and incidents, escalating as necessary and contributing to root cause analysis and remediation
Participate in a rotational on-call schedule to provide after-hours support for critical network security incidents and maintenance activities
Stay current with emerging threats, vulnerabilities, and technologies to continuously improve the organization’s security posture

Requirements:

5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
4+ years of hands-on experience in network security engineering, with a strong focus on enterprise-grade firewall platforms and secure network architecture
4+ years of experience configuring, managing, and troubleshooting firewalls and security management systems across Palo Alto Networks
4+ years of experience in security policy design, rulebase optimization, and hardening of multi-vendor firewall environments to meet organizational and compliance standards
2+ years of experience in Panorama – template stacks, device groups, policy hierarchy, logging, reporting, custom dashboards, role-based control

Nice to have:

Industry certifications such as Palo Alto Networks Certified Network Security Administrator (PCNSA), Palo Alto Networks Certified Network Security Engineer (PCNSE), Fortinet Network Security Expert 4 or 5 (NSE4/5
2+ years of practical experience using firewall migration tools such as Expedition, FortiConverter, SmartMove
Proficiency in troubleshooting complex network and security issues across multi-vendor environments, including deep packet inspection, log analysis, and root cause identification
Strong understanding of network protocols, routing and switching, VPN technologies, NAT, and intrusion prevention systems
Familiarity with incident response, log analysis, and security monitoring tools
Familiarity with automation and scripting for network security tasks using tools like Python, Ansible, or Terraform
Familiarity with cloud security architectures and controls in AWS, Azure, or Google Cloud Platform
Exposure to SIEM platforms, log management, and threat intelligence tools
Ability to manage and prioritize multiple projects in a fast-paced, dynamic environment
Strong interpersonal skills and the ability to communicate technical concepts to non-technical stakeholders
Ability to participate in a rotational on-call schedule and respond to after-hours incidents or maintenance tasks
Strong documentation skills and attention to detail

What we offer:

Health benefits
401(k) Plan
Paid time off
Disability benefits
Life insurance, critical illness insurance, and accident insurance
Parental leave
Critical caregiving leave
Discounts and savings
Commuter benefits
Tuition reimbursement
Scholarships for dependent children
Adoption reimbursement

Additional Information:

Job Posted:
September 18, 2025

Expiration:
September 23, 2025

Employment Type:

Fulltime

Work Type:

Hybrid work

View All Jobs In This Company

Job Link Share:

Palo Alto Lead Firewall Engineer