Search Jobs
Browse the latest opportunities at TPI Global.
So sorry, this position is no longer available.
Please go ahead and submit your application. We may have other positions that would be the perfect fit for you.
Alternatively, you may want to apply to one of the following related jobs:
Cloud Firewall Architect/Engineer
Posted: 08/31/2026
Job Number: 29192353
Job Description
Role: Cloud Firewall Architect
Location: Downey, CA (Hybrid)
Duration: 12 months + Potential to extend / convert
Position Description
Skills Required
- Advanced knowledge and proficiency with Palo Alto Networks security platforms.
- Advanced knowledge of Next-Generation Firewall (NGFW) technologies and security concepts.
- Advanced knowledge of cloud network security technologies and architectures across Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), and Oracle Cloud Infrastructure (OCI).
- Advanced knowledge of enterprise firewall technologies and migration concepts associated with legacy platforms.
- Advanced knowledge of firewall security policy principles, access control, rule optimization, network segmentation, and security best practices.
- Advanced knowledge of routing and switching technologies.
- Strong knowledge of network services and security technologies.
- Strong knowledge of network security monitoring and threat analysis.
- Strong knowledge of high-availability and fault-tolerant network security concepts.
- Strong knowledge of firewall software and security content management.
- Working knowledge of private network interconnection technologies.
- Strong knowledge of network security automation and Infrastructure as Code (IaC) concepts.
Experience Required
- At least five (5) years of experience with Palo Alto Networks physical firewall appliances, VM-Series, Panorama, Device Groups, Templates, Template Stacks, and Strata Cloud Manager (SCM), or comparable.
- At least five (5) years of experience with Next-Generation Firewall (NGFW) technologies, Intrusion Prevention Systems (IPS), Application Identification (App-ID), User Identification (User-ID), URL and content filtering, and Secure Sockets Layer/Transport Layer Security (SSL/TLS) inspection, or comparable.
- At least three (3) years of experience with cloud network security technologies in Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), and Oracle Cloud Infrastructure (OCI), including third-party and native cloud security controls, or comparable.
- At least five (5) years of experience with cloud traffic inspection architectures involving AWS Gateway Load Balancer (GWLB), AWS Transit Gateway (TGW), security Virtual Private Clouds (VPCs), Azure hub-and-spoke architectures, Network Virtual Appliances (NVAs), and User-Defined Routing (UDR), or comparable.
- At least four (4) years of experience in deploying and operating cloud-based firewalls, network virtual appliances, and native security controls in one or more of AWS, Azure, GCP, or OCI.
- At least five (5) years of experience in implementing and operating hybrid connectivity with dynamic routing (BGP), including AWS Transit Gateway, Azure ExpressRoute, or equivalent private interconnects.
Education Required
- Palo Alto Networks Certified Network Security Engineer (PCNSE) certification required.
Additional Information
Submitted candidates are expected to require minimal acclimation to the role.
Location: Downey, CA (Hybrid)
Duration: 12 months + Potential to extend / convert
Position Description
Skills Required
- Advanced knowledge and proficiency with Palo Alto Networks security platforms.
- Advanced knowledge of Next-Generation Firewall (NGFW) technologies and security concepts.
- Advanced knowledge of cloud network security technologies and architectures across Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), and Oracle Cloud Infrastructure (OCI).
- Advanced knowledge of enterprise firewall technologies and migration concepts associated with legacy platforms.
- Advanced knowledge of firewall security policy principles, access control, rule optimization, network segmentation, and security best practices.
- Advanced knowledge of routing and switching technologies.
- Strong knowledge of network services and security technologies.
- Strong knowledge of network security monitoring and threat analysis.
- Strong knowledge of high-availability and fault-tolerant network security concepts.
- Strong knowledge of firewall software and security content management.
- Working knowledge of private network interconnection technologies.
- Strong knowledge of network security automation and Infrastructure as Code (IaC) concepts.
Experience Required
- At least five (5) years of experience with Palo Alto Networks physical firewall appliances, VM-Series, Panorama, Device Groups, Templates, Template Stacks, and Strata Cloud Manager (SCM), or comparable.
- At least five (5) years of experience with Next-Generation Firewall (NGFW) technologies, Intrusion Prevention Systems (IPS), Application Identification (App-ID), User Identification (User-ID), URL and content filtering, and Secure Sockets Layer/Transport Layer Security (SSL/TLS) inspection, or comparable.
- At least three (3) years of experience with cloud network security technologies in Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), and Oracle Cloud Infrastructure (OCI), including third-party and native cloud security controls, or comparable.
- At least five (5) years of experience with cloud traffic inspection architectures involving AWS Gateway Load Balancer (GWLB), AWS Transit Gateway (TGW), security Virtual Private Clouds (VPCs), Azure hub-and-spoke architectures, Network Virtual Appliances (NVAs), and User-Defined Routing (UDR), or comparable.
- At least four (4) years of experience in deploying and operating cloud-based firewalls, network virtual appliances, and native security controls in one or more of AWS, Azure, GCP, or OCI.
- At least five (5) years of experience in implementing and operating hybrid connectivity with dynamic routing (BGP), including AWS Transit Gateway, Azure ExpressRoute, or equivalent private interconnects.
Education Required
- Palo Alto Networks Certified Network Security Engineer (PCNSE) certification required.
Additional Information
Submitted candidates are expected to require minimal acclimation to the role.
Meet Your Recruiter
Share This Job:
Related Jobs:
Login to save this search and get notified of similar positions.About Downey, CA
Ready to take the next step in your career? Explore our job opportunities in the vibrant area around Downey, California. Nestled in Los Angeles County, Downey offers a perfect blend of urban convenience and small-town charm. Known for its rich history, diverse community, and proximity to renowned landmarks like the Columbia Memorial Space Center and the Downey Theatre, this area provides an excellent backdrop for professional growth. From savoring authentic Mexican cuisine to enjoying performances at the Downey Symphony Orchestra, there's something for everyone here. Consider a career in this dynamic region, where opportunities abound and a unique culture awaits. Dive into our listings today and discover your next career move in Downey, California.