[Hiring] Network Security Consultant @ApTask

Role Description

We are seeking an experienced Network Security Consultant to support an enterprise network built on Palo Alto Networks security infrastructure integrated with Microsoft Azure, spanning corporate headquarters and remote offices across the US, EU, and Asia. The consultant will serve as the technical authority for firewall architecture, secure connectivity, and cloud network design across globally distributed sites.

• Design, deploy, and maintain Palo Alto Networks NGFW (physical and VM-Series) infrastructure across on-premises and Azure environments.
• Architect and manage site-to-site VPN and dynamic routing (BGP/OSPF) between regional offices, data centers, and Azure VNets.
• Configure and support GlobalProtect for secure remote-user access, including client IP pool management and route redistribution into BGP/OSPF.
• Design and manage Azure networking components: VNets, VNet peering, ExpressRoute, Azure VPN Gateway, Route Tables (UDRs), NSGs, and Azure Firewall where applicable.
• Build and maintain multi-region connectivity architecture (hub-and-spoke or mesh) linking US, EU, and Asia offices with consistent security policy and low-latency routing.
• Manage centralized policy and logging via Panorama, ensuring consistent security posture across all sites.
• Own routing design and troubleshooting for BGP peering between Palo Alto virtual routers and Azure/ExpressRoute circuits or third-party carriers.
• Support network segmentation, Zero Trust principles, and security zone design across cloud and branch environments.
• Troubleshoot cross-region connectivity, latency, and routing issues, coordinating with regional IT/network teams and ISPs.
• Produce and maintain network architecture documentation, runbooks, and change management records.
• Participate in security audits, vulnerability remediation, and compliance initiatives (e.g., SOC 2, ISO 27001, GDPR considerations for EU sites).

Qualifications

• 5+ years of hands-on experience with Palo Alto Networks firewalls (PAN-OS), including Panorama management.
• Strong working knowledge of GlobalProtect architecture (portal/gateway design, IP pools, split tunneling, redistribution).
• Solid understanding of dynamic routing protocols, particularly BGP (route redistribution, filtering, multi-homed peering); OSPF a plus.
• Demonstrated experience with Microsoft Azure networking: VNets, ExpressRoute, VPN Gateway, NSGs, Route Tables, Azure Firewall/Front Door (as applicable).
• Experience designing and supporting multi-region WAN/VPN architectures connecting offices across multiple continents.
• Familiarity with SD-WAN concepts and technologies is a plus.
• Working knowledge of IPSec VPN design, GRE tunnels, and Transit-style hub-and-spoke topologies.
• Experience supporting distributed teams and working across US, EU, and Asia time zones.
• Strong troubleshooting skills using CLI (PAN-OS), packet captures, and routing table analysis.
• Excellent documentation and stakeholder communication skills.

Requirements

• PCNSE (Palo Alto Networks Certified Network Security Engineer)
• Microsoft Certified: Azure Network Engineer Associate (or equivalent Azure networking certification)
• CCNP / JNCIP or equivalent routing/switching certification (Juniper experience a plus)

Benefits

• Non-benefitted (other than those mandated under state or federal law).
• Please note that this position does not include paid time off benefits.
• ApTask offers subsidized insurance coverage to our employees.