Palo Alto Engineer

Remote

3 – 6 months contract

USC, GC no 3rd party vendor

Responsibilities

Client is supplying a Security Engineers that will support building out segmentation controls for the organization and placing applications into enforcement for North-South workstream. This team will provide leadership to the North-South workstream and provide team guidance, strategic execution, group management, reporting, and working towards the goal of migration implementation and policy enforcement. Client’s tasks for the North-South (Palo Alto) work effort includes:

• Panorama installation
• Logs
• Pre-designed template
• Device Group

• Detailed Implementation schedule
• Detailed plan for every cut required and every device needing to be modified

• Polic implementation of North-South segmentation
• Objects/Object Groups
• User-ID
• App-ID
• Content-ID
• Security Profiles
• Security Group Profiles

• Configure custom Application Objects based on unique application attributes within the Cummins environment where applicable.
• Configure and enable Intrusion Prevention System/intrusion Detection Systems (IPS/IDS) rules against defined Application Objects.
• Mapping of User-ID permissions to application destination
• Identify non-User-ID applications/traffic flows and validate inspection. Configure inspection rulesets for non-User-ID traffic flows as needed.
• Validate that North-South traffic is terminating on the servers
• Validate users are associated with a User-ID tag and the appropriate action is being taken against the correctly defined ruleset.
• Restricted user groups allowed to access the application (via integration between the Palo Alto firewalls and Active Directory, or Lightweight Directory Access Protocol (LDAP)
• Set each User-ID to deny once the policy and access has been confirmed
• Firewall change review and approvals

Job Type: Contract

Pay: $70.00 - $77.00 per hour

Schedule:

• 8 hour shift

Application Question(s):

• only USC, GC no 3rd party vendor. strong Palo Alto, Panorama, LDAP experience is must

Experience:

• Senior Network Engineer: 10 years (Preferred)
• Palo Alto: 10 years (Preferred)
• Panorama: 10 years (Preferred)
• User-ID: 8 years (Preferred)
• App-ID: 8 years (Preferred)
• Lightweight Directory Access Protocol (LDAP): 10 years (Preferred)
• Security Profiles: 10 years (Preferred)

Work Location: Remote

Please Note :
blog.nvalabs.org is the go-to platform for job seekers looking for the best job postings from around the web. With a focus on quality, the platform guarantees that all job postings are from reliable sources and are up-to-date. It also offers a variety of tools to help users find the perfect job for them, such as searching by location and filtering by industry. Furthermore, blog.nvalabs.org provides helpful resources like resume tips and career advice to give job seekers an edge in their search. With its commitment to quality and user-friendliness, Site.com is the ideal place to find your next job.