Network Security/Firewall Consultant

Job Title :- Firewall Consultant

Location :- Calgary ,AB-Onsite

Job description:-

Role Summary:

The L3 Firewall Support Consultant is responsible for providing advanced technical support, administration, troubleshooting, and optimization of enterprise network security infrastructure, primarily focusing on Cisco Firepower/ASA and Palo Alto Networks firewalls. The role involves handling complex incidents, implementing security policies, driving root cause analysis, and ensuring high availability and security compliance across the network environment. Relevant enterprise references include skills around Palo Alto, Cisco Firepower/ASA, VPNs, security policy management, incident resolution, and network security engineering.

Key Responsibilities:

1. Provide Level 3 support for Cisco ASA, Cisco Firepower (FTD/FMC), and Palo Alto firewalls
2. Troubleshoot and resolve complex network security incidents, escalations, and service outages
3. Design, review, and implement firewall security policies, NAT rules, and access control lists
4. Configure and support Site-to-Site VPNs, Remote Access VPNs, IPSec, and SSL VPN solutions
5. Perform firewall upgrades, migration activities, patching, and firmware management
6. Conduct root cause analysis (RCA) and prepare incident/problem management reports
7. Monitor firewall health, performance, capacity, and security threats
8. Support IDS/IPS, URL Filtering, Threat Prevention, and Application Control features
9. Collaborate with SOC, Network, Cloud, and Infrastructure teams during major incidents and security events
10. Ensure compliance with security standards, audit requirements, and change management process
11. Participate in on-call support and major incident bridges
12. Create and maintain technical documentation, SOPs, and knowledge base articles

Technical Skills

Primary Skills:

1. Palo Alto Networks (PAN-OS, Panorama)
2. Cisco ASA
3. Cisco Firepower (FTD/FMC)
4. Firewall Policy Management
5. NAT, ACL, Routing & Switching
6. VPN Technologies (IPSec/SSLVPN)

Secondary Skills

• Cisco Routers & Switches
• Network Segmentation
• IDS/IPSF5 Load Balancer
• AWS/Azure Network Security
• Splunk, SolarWinds, Infoblox
• Python scripting for automation (preferred)

These skills align with network security engineer profiles referencing Palo Alto, Cisco Firepower/ASA, VPNs, routing, switching, cloud security, Splunk, SolarWinds, and related security technologies.

Experience & Qualifications

• 6–10+ years of experience in Network Security / Firewall Administration.
• Minimum 4+ years of hands-on experience with Palo Alto and Cisco Firewall platforms.
• Strong understanding of TCP/IP, Routing Protocols, VPNs, and Security Architecture.
• Experience in Incident, Change, and Problem Management processes.
• Bachelor's degree in Computer Science, IT, or related field.

Preferred Certifications:

• PCNSE (Palo Alto Networks Certified Network Security Engineer)
• CCNP Security / CC IE Security
• Cisco Firepower Certifications
• ITIL

Foundation Key

• Competencies
• Advanced Troubleshooting
• Incident & Problem Management
• Security Risk Assessment
• Stakeholder Communication
• Documentation & Knowledge Management
• Team Mentoring and Technical Leadership