W2 -Network Security Engineer (Migration from Zscaler To Palo Alto)-Remote

Remote, USA • Full-time • Posted 2026-05-31

Role: Network Security Engineer (Zscaler To Palo Alto)
Locations: 100% Remote (Client is in TX)
Duration: 12+ Months Contract

We are seeking an experienced Palo Alto Network Security Engineer to lead and support critical network security efforts in our transition to public cloud infrastructure.
This role is a key contributor to two main initiatives: migrating Zscaler security policies to Palo Alto firewalls with an emphasis on URL category optimization, and collaborating with SYF PerDef and application teams to implement data-center-extension wave rules.
Key Responsibilities:
Zscaler to Palo Alto Policy Migration
Lead efforts to migrate existing security policies from Zscaler to Palo Alto firewalls, ensuring a seamless transition before the end of the year.
Analyze current URL filtering policies and implement strategies to optimize and conserve URL category usage, specifically to remain within the 500 URL category limit per vsys.
Collaborate with network, security, and cloud teams to align policies with organizational security standards and cloud migration goals.
Develop and maintain detailed documentation of migration processes, configurations, and adjustments.
Data Center Extension Wave Rules Implementation
Partner with SYF PerDef to identify, develop, and implement necessary wave rules required for data center extension to the cloud.
Work closely with application teams to test and validate wave rules, ensuring minimal disruption and performance impact.
Maintain ongoing management and tuning of Palo Alto firewall policies based on application requirements and evolving threat landscape.
General Palo Alto Firewall Policy Management
Manage, optimize, and troubleshoot Palo Alto firewall policies across on-premises and cloud environments.
Provide technical guidance to security and network teams regarding Palo Alto best practices, performance, and feature utilization.
Required Qualifications:
Extensive hands-on experience (5+ years) with Palo Alto Networks firewall administration and policy management in enterprise environments.
Proven experience in migrating security policies from Zscaler to Palo Alto or similar firewall migration projects.
Strong understanding of Palo Alto URL Filtering capabilities and constraints, especially managing URL categories and vsys limits.
Experience working with data center security extension concepts including wave rules or similar traffic segmentation controls.
Solid knowledge of network security architecture, VPNs, routing, and cloud network integration, preferably with AWS or other public clouds.
Ability to collaborate effectively with application teams and other stakeholders during rule implementation and testing phases.
Excellent troubleshooting and problem-solving skills in firewall policy conflicts and rule optimization.
Strong communication skills and ability to produce clear technical documentation.
Preferred Qualifications:
Palo Alto Networks certifications such as PCNSE (Palo Alto Networks Certified Network Security Engineer).
Experience in financial services or similarly regulated environments.
Familiarity with Infrastructure as Code (IaC) tools for automating firewall policy deployment.
Exposure to cloud network security frameworks supporting public cloud migrations.