Metropolitan Council
Palo Alto Firewall Engineer (Systems Engineer 3)
Metropolitan Council, Saint Paul, Minnesota, United States, 55130
Palo Alto Firewall Engineer (Systems Engineer 3)
Print (https://www.governmentjobs.com/careers/metrocouncil/jobs/newprint/4734235)
Apply
Palo Alto Firewall Engineer (Systems Engineer 3)
Salary
$93,017.60 - $150,862.40 Annually
Location
390 Robert St. N St. Paul, MN
Job Type
Full-Time
Job Number
2024-00376
Division
Regional Administration
Department
IS-Admin
Opening Date
12/19/2024
Closing Date
1/5/2025 11:59 PM Central
Description
Benefits
Questions
WHO WE ARE
We are the Metropolitan Council, the regional government for the seven-county Twin Cities metropolitan area. We plan 30 years ahead for the future of the metropolitan area and provide regional transportation, wastewater, and housing services.More information about us on our website. (https://metrocouncil.org/About-Us/The-Council-Who-We-Are.aspx)
We are committed to supporting a diverse workforce that reflects the communities we serve.
Information Services is the central IT department supporting all divisions of the Metropolitan Council. Our 140 team members provide technology, practices and innovative solutions that enable the core services of the Council.
How your work would contribute to our organization and the Twin Cities region:
We are seeking a highly skilled and experiencedPalo Alto Firewall Engineer to join our team. This role is critical in ensuring the security, reliability, and performance of our enterprise network infrastructure. The ideal candidate will have extensive expertise in configuring, managing, and optimizing Palo Alto Networks technologies, including Strata Cloud Manager, Prisma Access, GlobalProtect, Panorama, and Palo Alto's SASE (Secure Access Service Edge) solutions. This position requires a professional who can work effectively in both on-premises and cloud-based environments, ensuring seamless integration and robust security across all platforms.
This position is eligible for a hybrid (both remote and onsite) telework arrangement. Candidate's permanent residence must be in Minnesota or Wisconsin.
What you would do in this job
Firewall Management and Configuration:
Deploy, configure, and manage Palo Alto firewalls across on-premises and cloud environments.
Implement and maintain security policies, access controls, and NAT rules to meet organizational requirements.
Optimize firewall performance and ensure high availability.
Cloud Security and SASE Solutions:
Administer and manage Palo Alto's Prisma Access for secure remote access solutions.
Utilize Strata Cloud Manager to monitor and manage distributed firewalls.
Implement and support Palo Alto's SASE products to ensure secure access for users across hybrid environments.
Network Security Monitoring and Troubleshooting:
Monitor network traffic for anomalies using Panorama and other tools to ensure proactive threat detection.
Troubleshoot complex network security issues, including VPNs (GlobalProtect), connectivity problems, and policy conflicts.
Perform regular audits of firewall configuration to ensure compliance with security standards.
Automation and Optimization:
Develop scripts or use automation tools to streamline firewall management tasks (e.g. policy updates, log analysis).C
Identify opportunities for process improvements to enhance operational efficiency.
Collaboration and Documentation:
Work closely with cross-functional teams to design secure network architectures that align with business goals.
Maintain detailed technical documentation, including network diagrams, change logs, and SOPs.
What education and experience are required for this job (minimum qualifications)
Any of the following combinations of education (in computer information technology, cyber security, computer forensics, computer science, or closely related field) and experience managing Palo Alto Networks technologies and working with cloud environments and their integration with Palo Alto solutions:
Bachelor's degree or higher and five years of experience
Associate degree and seven years of experience
High school diploma/GED and nine years of experience
Experience managing Palo Alto Networks technologies should include Strata Cloud Manager, Prisma Access, GlobalProtect VPN solutions, Panorama centralized management platform, and Palo Alto SASE products (e.g. Prisma SD-WAN).
What additional skills and experience would be helpful in this job (desired qualifications):
Strong understanding of network security concepts such as firewalls, VPNs, intrusion prevention systems (IPS), and zero-trust architectures.
Experience configuring advanced features like App-ID, User-ID, Threat Prevention, URL Filtering, WildFire, and SSL decryption.
Hands-on experience in large-scale enterprise environments with complex network infrastructures.
Familiarity with scripting languages (e.g., Python) or automation tools for managing firewalls at scale.
Experience with third-party SIEM tools for log analysis and incident response integration.
Experience, or knowledge of, compliance frameworks such as PCI DSS, HIPAA, or ISO 27001 as they relate to network security.
Exposure to SD-WAN technologies or other advanced networking solutions.
Relevant certifications such as Palo Alto Networks Certified Network Security Administrator (PCNSA) or Palo Alto Networks Certified Network Security Engineer (PCNSE).
Experience working and collaborating in a diverse, multi-cultural, and inclusive environment.
What knowledge, skills, and abilities you should have within the first six months on the job:
Strong problem-solving abilities with a proactive approach to identifying risks and resolving issues under pressure.
Excellent communication skills for collaborating with technical teams and presenting complex concepts to non-technical stakeholders.
High attention to detail with a commitment to maintaining accurate documentation and adhering to change management processes.
Ability to thrive in a fast-paced environment while managing multiple priorities effectively.
What you can expect from us:
We offer the opportunity to make a difference and positively influence the Twin Cities metropolitan area.
We encourage our employees to develop their skills through on-site training and tuition reimbursement.
We provide a competitive salary, excellent benefits and a good work/life balance.
More about why you should join us! (http://metrocouncil.org/Employment/Making-A-Difference.aspx)
Additional information
Union: AFSCME
Grade: I
FLSA Status: Exempt
Safety Sensitive: No
What your work environment would be:
You would perform your work in a standard office setting. Work may sometimes require travel between your primary work site and other sites.
What steps the recruitment process involves:
We review your minimum qualifications.
We rate your education and experience.
We conduct a structured panel interview.
We conduct a selection interview.
Once you have successfully completed the steps above, then:
If you are new to the Metropolitan Council , you must pass a background check which verifies education, employment, and criminal history. A driving record check and/or physical may be conducted if applicable to the job. If you have a criminal conviction, you do not automatically fail. The Metropolitan Council considers felony, gross misdemeanor and misdemeanor convictions on a case-by-case basis, based on whether they are related to the job and whether the candidate has demonstrated adequate rehabilitation.
If you are already an employee of the Metropolitan Council , you must pass a criminal background check if the job you're applying for is safety sensitive, is a supervisory or management job, is in the Finance, Information Services, Audit, or Human Resources departments, or has access to financial records, files/databases, cash, vouchers or transit fare cards. A driving record check and/or physical may be conducted if applicable to the position.
Security Policy:
This position involves direct access to Criminal Justice Information (CJI) as defined by the FBI CJIS (Criminal Justice Information Services) Security Policy. In accordance with section 5.12.1.1 of the FBI CJIS Security Policy, final candidates must agree to submit to a state of residence and national fingerprint-based record check.
If the result of the record check reveals criminal convictions, the nature and circumstances of those convictions will be reviewed by the Metropolitan Transit Police Department and/or the Minnesota Bureau of Criminal Apprehension to determine if access to Criminal Justice Information would be permissible. If it is determined that access to Criminal Justice Information would not be permissible, the candidate will no longer be considered for the position.
IMPORTANT: If you make a false statement or withhold information, you may be barred from job consideration.
The Metropolitan Council is an Equal Opportunity, Affirmative Action, and veteran-friendly employer. The Council is committed to a workforce that reflects the diversity of the region and strongly encourages persons of color, members of the LGBTQ community, individuals with disabilities, women, and veterans to apply.
If you have a disability that requires accommodation during the selection process, please email HR-OCCHealth@metc.state.mn.us.
We believe our employees are a key to our agency's success! In order to attract and retain high quality employees, the Council provides a highly competitive benefits package both in choice and coverage levels. Some highlights about our benefits are listed below:
Guaranteed monthly retirement income through Minnesota State Retirement System pension fund
Opportunity to save additional funds for retirement on a tax-deferred basis through a voluntary deferred compensation (457) plan
Two or more medical plans from which to choose, with employer contribution towards premiums over 80%
Dental insurance, life insurance and vision insurance
The following benefits are provided to all employees as part of working for the Council. You will have access to free:
Well@Work clinic
bus/rail pass valued at over $1200 per year
parking at many job locations
fitness centers at many job locations
Employee Assistance Program
extensive health and wellness programs and resources
01
Applicant Instructions: The supplemental questions listed below are to further evaluate your education and experience and to determine your eligibility for this position. Answer each question completely and please do not type "see resume" otherwise your application will be considered incomplete, and you will not receive further consideration for this position. The experience you indicate in your responses should also be consistent with the Work History section of this application. If you attached a resume and/or cover letter to your application, it will be reviewed at the education and experience review step. I have read and understand the above instructions regarding supplemental questions.
Yes
No
02
How did youfirsthear about this job opening?
CareerForce Center
Community Event/Organization
Employee Referral
Facebook
Glassdoor
Indeed
Job Fair
LinkedIn
Metro Transit Bus Advertisement
Twitter
Website: governmentjobs.com
Website: metrocouncil.org
Website: metrotransit.org
Website: minnesotajobnetwork.com
Other
03
If you selected 'Other', please describe where you first heard about this job. if you selected 'Employee Referral' please enter the employee's first and last name, ID number (if known), and job title. Type N/A if not applicable.
04
Please select the option that best reflects your completed education and experience level.
Bachelor's degree or higher in computer information technology, cyber security, computer forensics, computer science, or a closely related field AND at least five years of experience managing Palo Alto Networks technologies and working with cloud environments and their integration with Palo Alto Solutions
Associate degree in computer information technology, cyber security, computer forensics, computer science, or a closely related field AND at least seven years of experience managing Palo Alto Networks technologies and working with cloud environments and their integration with Palo Alto Solutions
High school diploma/GED AND at least nine years of experience managing Palo Alto Networks technologies and working with cloud environments and their integration with Palo Alto Solutions
Some education in computer information technology, cyber security, computer forensics, computer science, or a closely related field AND/OR some experience managing Palo Alto Networks technologies and working with cloud environments and their integration with Palo Alto Solutions, but less than the options above
None of the above
05
If you indicated that you have a degree in the previous question, please list below what your degree type and field of study. If this doesn't apply to you, indicate 'N/A.'
06
Please describe your experience managing Palo Alto Networks technologies and working with cloud environments and their integration with Palo Alto solutions. If you do not have this experience, indicate 'N/A.'
07
Please select the areas below with which you have work experience (select all that apply).
Strong understanding of network security concepts such as firewalls, VPNs, intrusion prevention systems (IPS), and zero-trust architectures.
Experience configuring advanced features like App-ID, User-ID, Threat Prevention, URL Filtering, WildFire, and SSL decryption.
Hands-on experience in large-scale enterprise environments with complex network infrastructures.
Familiarity with scripting languages (e.g., Python) or automation tools for managing firewalls at scale.
Experience with third-party SIEM tools for log analysis and incident response integration.
Experience, or knowledge of, compliance frameworks such as PCI DSS, HIPAA, or ISO 27001 as they relate to network security.
Exposure to SD-WAN technologies or other advanced networking solutions.
Relevant certifications such as Palo Alto Networks Certified Network Security Administrator (PCNSA) or Palo Alto Networks Certified Network Security Engineer (PCNSE).
08
Please describe your experience working and collaborating in a diverse, multicultural, and inclusive environment.
Required Question
Agency
Metropolitan Council
Address
390 Robert St. N.St. Paul, Minnesota, 55101
Website
https://metrocouncil.org
Apply
Please verify your email addressVerify Email
Print (https://www.governmentjobs.com/careers/metrocouncil/jobs/newprint/4734235)
Apply
Palo Alto Firewall Engineer (Systems Engineer 3)
Salary
$93,017.60 - $150,862.40 Annually
Location
390 Robert St. N St. Paul, MN
Job Type
Full-Time
Job Number
2024-00376
Division
Regional Administration
Department
IS-Admin
Opening Date
12/19/2024
Closing Date
1/5/2025 11:59 PM Central
Description
Benefits
Questions
WHO WE ARE
We are the Metropolitan Council, the regional government for the seven-county Twin Cities metropolitan area. We plan 30 years ahead for the future of the metropolitan area and provide regional transportation, wastewater, and housing services.More information about us on our website. (https://metrocouncil.org/About-Us/The-Council-Who-We-Are.aspx)
We are committed to supporting a diverse workforce that reflects the communities we serve.
Information Services is the central IT department supporting all divisions of the Metropolitan Council. Our 140 team members provide technology, practices and innovative solutions that enable the core services of the Council.
How your work would contribute to our organization and the Twin Cities region:
We are seeking a highly skilled and experiencedPalo Alto Firewall Engineer to join our team. This role is critical in ensuring the security, reliability, and performance of our enterprise network infrastructure. The ideal candidate will have extensive expertise in configuring, managing, and optimizing Palo Alto Networks technologies, including Strata Cloud Manager, Prisma Access, GlobalProtect, Panorama, and Palo Alto's SASE (Secure Access Service Edge) solutions. This position requires a professional who can work effectively in both on-premises and cloud-based environments, ensuring seamless integration and robust security across all platforms.
This position is eligible for a hybrid (both remote and onsite) telework arrangement. Candidate's permanent residence must be in Minnesota or Wisconsin.
What you would do in this job
Firewall Management and Configuration:
Deploy, configure, and manage Palo Alto firewalls across on-premises and cloud environments.
Implement and maintain security policies, access controls, and NAT rules to meet organizational requirements.
Optimize firewall performance and ensure high availability.
Cloud Security and SASE Solutions:
Administer and manage Palo Alto's Prisma Access for secure remote access solutions.
Utilize Strata Cloud Manager to monitor and manage distributed firewalls.
Implement and support Palo Alto's SASE products to ensure secure access for users across hybrid environments.
Network Security Monitoring and Troubleshooting:
Monitor network traffic for anomalies using Panorama and other tools to ensure proactive threat detection.
Troubleshoot complex network security issues, including VPNs (GlobalProtect), connectivity problems, and policy conflicts.
Perform regular audits of firewall configuration to ensure compliance with security standards.
Automation and Optimization:
Develop scripts or use automation tools to streamline firewall management tasks (e.g. policy updates, log analysis).C
Identify opportunities for process improvements to enhance operational efficiency.
Collaboration and Documentation:
Work closely with cross-functional teams to design secure network architectures that align with business goals.
Maintain detailed technical documentation, including network diagrams, change logs, and SOPs.
What education and experience are required for this job (minimum qualifications)
Any of the following combinations of education (in computer information technology, cyber security, computer forensics, computer science, or closely related field) and experience managing Palo Alto Networks technologies and working with cloud environments and their integration with Palo Alto solutions:
Bachelor's degree or higher and five years of experience
Associate degree and seven years of experience
High school diploma/GED and nine years of experience
Experience managing Palo Alto Networks technologies should include Strata Cloud Manager, Prisma Access, GlobalProtect VPN solutions, Panorama centralized management platform, and Palo Alto SASE products (e.g. Prisma SD-WAN).
What additional skills and experience would be helpful in this job (desired qualifications):
Strong understanding of network security concepts such as firewalls, VPNs, intrusion prevention systems (IPS), and zero-trust architectures.
Experience configuring advanced features like App-ID, User-ID, Threat Prevention, URL Filtering, WildFire, and SSL decryption.
Hands-on experience in large-scale enterprise environments with complex network infrastructures.
Familiarity with scripting languages (e.g., Python) or automation tools for managing firewalls at scale.
Experience with third-party SIEM tools for log analysis and incident response integration.
Experience, or knowledge of, compliance frameworks such as PCI DSS, HIPAA, or ISO 27001 as they relate to network security.
Exposure to SD-WAN technologies or other advanced networking solutions.
Relevant certifications such as Palo Alto Networks Certified Network Security Administrator (PCNSA) or Palo Alto Networks Certified Network Security Engineer (PCNSE).
Experience working and collaborating in a diverse, multi-cultural, and inclusive environment.
What knowledge, skills, and abilities you should have within the first six months on the job:
Strong problem-solving abilities with a proactive approach to identifying risks and resolving issues under pressure.
Excellent communication skills for collaborating with technical teams and presenting complex concepts to non-technical stakeholders.
High attention to detail with a commitment to maintaining accurate documentation and adhering to change management processes.
Ability to thrive in a fast-paced environment while managing multiple priorities effectively.
What you can expect from us:
We offer the opportunity to make a difference and positively influence the Twin Cities metropolitan area.
We encourage our employees to develop their skills through on-site training and tuition reimbursement.
We provide a competitive salary, excellent benefits and a good work/life balance.
More about why you should join us! (http://metrocouncil.org/Employment/Making-A-Difference.aspx)
Additional information
Union: AFSCME
Grade: I
FLSA Status: Exempt
Safety Sensitive: No
What your work environment would be:
You would perform your work in a standard office setting. Work may sometimes require travel between your primary work site and other sites.
What steps the recruitment process involves:
We review your minimum qualifications.
We rate your education and experience.
We conduct a structured panel interview.
We conduct a selection interview.
Once you have successfully completed the steps above, then:
If you are new to the Metropolitan Council , you must pass a background check which verifies education, employment, and criminal history. A driving record check and/or physical may be conducted if applicable to the job. If you have a criminal conviction, you do not automatically fail. The Metropolitan Council considers felony, gross misdemeanor and misdemeanor convictions on a case-by-case basis, based on whether they are related to the job and whether the candidate has demonstrated adequate rehabilitation.
If you are already an employee of the Metropolitan Council , you must pass a criminal background check if the job you're applying for is safety sensitive, is a supervisory or management job, is in the Finance, Information Services, Audit, or Human Resources departments, or has access to financial records, files/databases, cash, vouchers or transit fare cards. A driving record check and/or physical may be conducted if applicable to the position.
Security Policy:
This position involves direct access to Criminal Justice Information (CJI) as defined by the FBI CJIS (Criminal Justice Information Services) Security Policy. In accordance with section 5.12.1.1 of the FBI CJIS Security Policy, final candidates must agree to submit to a state of residence and national fingerprint-based record check.
If the result of the record check reveals criminal convictions, the nature and circumstances of those convictions will be reviewed by the Metropolitan Transit Police Department and/or the Minnesota Bureau of Criminal Apprehension to determine if access to Criminal Justice Information would be permissible. If it is determined that access to Criminal Justice Information would not be permissible, the candidate will no longer be considered for the position.
IMPORTANT: If you make a false statement or withhold information, you may be barred from job consideration.
The Metropolitan Council is an Equal Opportunity, Affirmative Action, and veteran-friendly employer. The Council is committed to a workforce that reflects the diversity of the region and strongly encourages persons of color, members of the LGBTQ community, individuals with disabilities, women, and veterans to apply.
If you have a disability that requires accommodation during the selection process, please email HR-OCCHealth@metc.state.mn.us.
We believe our employees are a key to our agency's success! In order to attract and retain high quality employees, the Council provides a highly competitive benefits package both in choice and coverage levels. Some highlights about our benefits are listed below:
Guaranteed monthly retirement income through Minnesota State Retirement System pension fund
Opportunity to save additional funds for retirement on a tax-deferred basis through a voluntary deferred compensation (457) plan
Two or more medical plans from which to choose, with employer contribution towards premiums over 80%
Dental insurance, life insurance and vision insurance
The following benefits are provided to all employees as part of working for the Council. You will have access to free:
Well@Work clinic
bus/rail pass valued at over $1200 per year
parking at many job locations
fitness centers at many job locations
Employee Assistance Program
extensive health and wellness programs and resources
01
Applicant Instructions: The supplemental questions listed below are to further evaluate your education and experience and to determine your eligibility for this position. Answer each question completely and please do not type "see resume" otherwise your application will be considered incomplete, and you will not receive further consideration for this position. The experience you indicate in your responses should also be consistent with the Work History section of this application. If you attached a resume and/or cover letter to your application, it will be reviewed at the education and experience review step. I have read and understand the above instructions regarding supplemental questions.
Yes
No
02
How did youfirsthear about this job opening?
CareerForce Center
Community Event/Organization
Employee Referral
Glassdoor
Indeed
Job Fair
Metro Transit Bus Advertisement
Website: governmentjobs.com
Website: metrocouncil.org
Website: metrotransit.org
Website: minnesotajobnetwork.com
Other
03
If you selected 'Other', please describe where you first heard about this job. if you selected 'Employee Referral' please enter the employee's first and last name, ID number (if known), and job title. Type N/A if not applicable.
04
Please select the option that best reflects your completed education and experience level.
Bachelor's degree or higher in computer information technology, cyber security, computer forensics, computer science, or a closely related field AND at least five years of experience managing Palo Alto Networks technologies and working with cloud environments and their integration with Palo Alto Solutions
Associate degree in computer information technology, cyber security, computer forensics, computer science, or a closely related field AND at least seven years of experience managing Palo Alto Networks technologies and working with cloud environments and their integration with Palo Alto Solutions
High school diploma/GED AND at least nine years of experience managing Palo Alto Networks technologies and working with cloud environments and their integration with Palo Alto Solutions
Some education in computer information technology, cyber security, computer forensics, computer science, or a closely related field AND/OR some experience managing Palo Alto Networks technologies and working with cloud environments and their integration with Palo Alto Solutions, but less than the options above
None of the above
05
If you indicated that you have a degree in the previous question, please list below what your degree type and field of study. If this doesn't apply to you, indicate 'N/A.'
06
Please describe your experience managing Palo Alto Networks technologies and working with cloud environments and their integration with Palo Alto solutions. If you do not have this experience, indicate 'N/A.'
07
Please select the areas below with which you have work experience (select all that apply).
Strong understanding of network security concepts such as firewalls, VPNs, intrusion prevention systems (IPS), and zero-trust architectures.
Experience configuring advanced features like App-ID, User-ID, Threat Prevention, URL Filtering, WildFire, and SSL decryption.
Hands-on experience in large-scale enterprise environments with complex network infrastructures.
Familiarity with scripting languages (e.g., Python) or automation tools for managing firewalls at scale.
Experience with third-party SIEM tools for log analysis and incident response integration.
Experience, or knowledge of, compliance frameworks such as PCI DSS, HIPAA, or ISO 27001 as they relate to network security.
Exposure to SD-WAN technologies or other advanced networking solutions.
Relevant certifications such as Palo Alto Networks Certified Network Security Administrator (PCNSA) or Palo Alto Networks Certified Network Security Engineer (PCNSE).
08
Please describe your experience working and collaborating in a diverse, multicultural, and inclusive environment.
Required Question
Agency
Metropolitan Council
Address
390 Robert St. N.St. Paul, Minnesota, 55101
Website
https://metrocouncil.org
Apply
Please verify your email addressVerify Email