QnA Tech is at the forefront of engineering and implementing leading-edge technological solutions to fuel growth, innovation and better customer service for government clients. We have been serving a variety of public and private sector businesses and organizations in efficient, effective digital transformation from design through development to maintenance. QnA Tech is looking to add to our security team that focuses on Palo Alto Strata Engineer. This position is onsite-Long Island Only.

We need a Palo certified engineer that can work 35 hours a week on site at Suffolk for Firewall management. This is going to be 6-12 month renewable contract.

Daily Tasks

• Monitor firewall and Panorama system health (CPU, memory, sessions, interfaces)
• Review system and threat logs for anomalies and critical alerts
• Validate High Availability (HA) status and synchronization
• Ensure successful log forwarding to SIEM/logging systems
• Review and respond to service requests and incident tickets

Weekly Tasks

• Analyze traffic trends, application usage, and bandwidth consumption
• Review and tune firewall policies for optimization and security posture
• Validate content and signature updates (Threat, Apps, WildFire, URL filtering)
• Conduct rulebase hygiene (identify unused, redundant, or overly permissive rules)
• Provide weekly operational reporting

Monthly Tasks

• Perform comprehensive firewall health and performance review
• Analyze threat trends and provide actionable recommendations
• Validate licensing and subscription status
• Review SSL decryption coverage and effectiveness
• Update documentation (runbooks, diagrams, configurations)
• Deliver monthly executive report and recommendations

As-Needed Tasks

• Implement firewall policy changes and configuration updates
• Support incident response and troubleshooting activities
• Perform packet capture and deep traffic analysis
• Participate in change management processes (CAB approvals)
• Assist with audit requests and compliance validation
• Provide recommendations for architecture improvements

11.2 Required Technical Experience

The assigned engineer must demonstrate the following minimum experience and qualifications:

Core Requirements

• Minimum 5+ years of hands-on experience with Palo Alto Networks NGFW
• Strong experience with Panorama centralized management
• Deep knowledge of:
• App-ID, User-ID, and Content-ID
• Security policies and NAT configurations
• Zone-based firewall architecture

Security & Threat Expertise

• Experience analyzing:
• Threat logs (malware, exploits, C2 traffic)
• WildFire analysis and verdicts
• DNS Security and URL filtering events
• Understanding of:
• Network security principles
• Threat detection and response workflows

Networking & Troubleshooting

• Strong understanding of:
• TCP/IP, routing, switching, and VLANs
• VPN technologies (IPSec and GlobalProtect)
• Experience with:
• Packet capture tools
• CLI-based troubleshooting
• Session-level traffic analysis

Operational & Process Experience

• Experience working within:
• Change management processes (CAB)
• Incident management workflows
• ITSM/ticketing systems
• Ability to:
• Document configurations and procedures
• Produce operational and executive-level reports

Certifications (Preferred)

• Palo Alto Networks Certified Network Security Engineer (PCNSE) – Preferred
• Other relevant certifications (e.g., Security+, CISSP) – Beneficial

11.3 Soft Skills & Professional Requirements

• Strong communication skills (technical and non-technical)
• Ability to work independently and within a team environment
• Strong analytical and problem-solving skills
• Ability to prioritize tasks in a dynamic operational environment
• Professional demeanor suitable for public sector engagement

Job Types: Full-time, Contract

Pay: $80.00 - $100.00 per hour

Application Question(s):

• Are you willing to work onsite (No Remote)?

Experience:

• Palo Alto Networks Strata (NGFW): 5 years (Required)
• firewall: 5 years (Required)

License/Certification:

• PCNSE (Preferred)

Work Location: In person