Network Security Engineer (Contract)

About the role

This contract position focuses on hands‑on delivery, migration and operational support for a critical Firewall (FW) project. The engineer will work independently, quickly ramping up to manage Palo Alto firewalls across IT and OT environments.

Key responsibilities

• Execute firewall rule changes, migrations, and upgrades with minimal supervision.
• Support project‑driven deliverables while maintaining operational stability.
• Assess and optimise firewall rules to enable IT/OT segmentation.
• Produce clear technical documentation and hand‑over artifacts.
• Collaborate with IT and manufacturing leadership on change requests and outage management.

Required profile

• 10+ years of hands‑on experience with Palo Alto Networks firewalls (PA‑Series, VM‑Series) in large, complex enterprises.
• Proven experience delivering contract or project‑based work against defined timelines.
• Ability to operate autonomously and interact with both IT and manufacturing stakeholders.
• Strong troubleshooting skills across OSI layers 3‑7.

Required skills

• Palo Alto Networks firewalls (PA‑Series, VM‑Series)
• Palo Alto Panorama, Prisma Access, SCM, and IoT modules
• NAT configuration (source & destination)
• Routing protocols: OSPF, BGP
• VPN technologies: IPSec, GlobalProtect
• High Availability designs (active/passive, active/active)
• Firewall rule optimisation and lifecycle management
• Enterprise network segmentation and zoning
• VMware SD‑WAN (VeloCloud) integration