Senior Technology Architect

Job Description:

Responsibilities:

• Work in collaboration with Network Designer to roll out Next Generation LAN and WAN to MOH PSAP locations:
• Produce SD-WAN design and configuration (policy, template development)
• Produce high-level and low-level network design (design workbooks).
• Configure switches, routers, firewalls as per the network design.
• Configure dynamic routing protocols (BGP/OSPF) on both SD-WAN and Firewall devices
• Perform physical Install of SD-WAN routers, LAN Switches, HA Firewalls
• Develop and apply plan for HVAC, Power, UPS, Generator, and associate equipment remediation work.
• Develop and apply Firewall policies.
• Develop Centralized and Localized policies for traffic and App-Aware routing
• Test configurations and troubleshoot network issues.
• Develop and Implement QoS policies for the Next Gen LAN and WAN
• Deploy configurations in network inventory DB.
• Work with facility SME/Cable Designer to assist with facility remediation.
• Develop and Configure Palo Alto Cloud logging.
• Maintain and support the network environment during Pilot phase of the project.
• ssist in configuration management automation initiative using ansible and other tools.
• Install Configure Aruba Clear Pass as Identity management solution.
• Install and configure OOB management Firewalls across PSAP locations
• Perform other project related duties as required.

Must Haves:

• Palo Alto Networks NGFWs - Extensive experience with Palo Alto firewalls, including policy creation, advanced threat prevention, and traffic analysis.
• Panorama Centralized Management - Proficiency in managing multiple firewalls using Panorama, including device groups, templates, and log analysis.
• Firewall Security & Rule Management - Advanced understanding of firewall policies, access control lists, and best practices for network security enforcement.
• Network Architecture & Security - Strong grasp of routing, switching, segmentation, and secure connectivity principles in complex enterprise environments.
• Cloud & Hybrid Network Security - Understanding of firewall deployments in cloud environments (AWS, Azure, GCP) and integration with on-prem networks.

Experience and Skill Set Requirements:

• Core Skills - 50%
• Firewall Security & Rule Management - Advanced understanding of firewall policies, access control lists, and best practices for network security enforcement.
• Network Architecture & Security - Strong grasp of routing, switching, segmentation, and secure connectivity principles in complex enterprise environments.
• Incident Response & Troubleshooting - Ability to diagnose and resolve network security incidents, performance issues, and firewall-related outages.
• Security Compliance & Risk Management - Understanding of regulatory frameworks (NIST, ISO 27001, PCI-DSS, etc.) and their implications on firewall configurations.
• Infrastructure Automation - Work closely with the Infrastructure Automation team to streamline firewall and network security operations using modern tools.
• Collaboration & Cross-Functional Integration - Work closely with network, security, cloud, and DevOps teams to enhance enterprise security postures.

Technical Skills - 30%:

• Palo Alto Networks NGFWs - Extensive experience with Palo Alto firewalls, including policy creation, advanced threat prevention, and traffic analysis.
• Panorama Centralized Management - Proficiency in managing multiple firewalls using Panorama, including device groups, templates, and log analysis.
• Network Automation & Scripting - Familiarity with automation frameworks (Ansible, Terraform) and scripting languages (Python, PowerShell) for firewall automation.
• VPN & Secure Connectivity - Experience with GlobalProtect, IPsec, SSL VPNs, and hybrid cloud security architectures.
• Cloud & Hybrid Network Security - Understanding of firewall deployments in cloud environments (AWS, Azure, GCP) and integration with on-prem networks.
• Logging, SIEM, & Threat Intelligence - Expertise in security monitoring tools, log analysis, and incident response workflows.

Communication/Analytical Skills - 20%:

• dvanced Problem-Solving & Root Cause Analysis - Ability to diagnose and resolve complex firewall and network security challenges in high-pressure situations.
• Security Incident Reporting & Documentation - Skilled at documenting security events, network changes, and troubleshooting steps in a clear and concise manner.
• Cross-Team Communication - Ability to convey complex security issues to non-technical stakeholders while collaborating effectively with technical teams.
• Training & Mentorship - Provide training and mentorship to junior engineers and cross-functional teams on firewall security best practices.
• Stakeholder & Vendor Engagement - Work closely with IT leadership, compliance teams, and security vendors to implement and refine security strategies.
• Process Improvement & Best Practices - Continuously evaluate security operations and implement optimizations for improved efficiency and risk mitigation.
• Continuous Learning & Adaptability - Stay up to date with emerging firewall technologies, automation trends, and evolving cybersecurity threats.