Senior Firewall Engineer

Betway Global

. Manage, support, and maintain Palo Alto Networks (Panorama and standalone) and Cisco ASA firewalls in production environments .

Posted 10/7/2026full-timeJohannesburg • South AfricaSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in managing and securing network environments, particularly with Palo Alto Networks and Cisco ASA firewalls. Proficient in implementing security policies, troubleshooting network issues, and supporting compliance requirements.

Highest-signal resume keywords

Palo Alto Networks Firewall AdministrationCisco ASA Firewall AdministrationIPSec VPN ConfigurationNetwork Security Incident ResponseCloudflare WAF Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Network SecurityFirewall ManagementNAT ConfigurationPolicy-Based RoutingTCP/IP FundamentalsRouting Protocols (BGP, OSPF)Log AnalysisPacket CaptureSASE SolutionsZero-Trust Principles

Soft Skills

Clear CommunicationIndependent WorkMentoring

Tools & Technologies

Palo Alto Prisma AccessCloudflare WAFPanoramaCisco FMC/FTDAWSAzureGCP

Certifications & Qualifications

PCNSECisco CCNP SecurityCCIE Security

Industry Keywords

Security PoliciesCompliance RequirementsHigh-Availability FailoverTraffic Flow TroubleshootingRunbooks Documentation

Tech Stack

Tools & technologies

AnsibleAWSAzureCloudFirewallsGoogle Cloud PlatformPythonTCP/IPTerraform

About the role

Key responsibilities & impact

Manage, support, and maintain Palo Alto Networks (Panorama and standalone) and Cisco ASA firewalls in production environments
Create, review, and optimize security policies using least-privilege principles and remove redundant or overly permissive rules
Perform firmware and OS upgrades, patching, and high-availability failover testing
Implement new firewalls where required
Monitor firewall health, performance, and logs, and troubleshoot connectivity and traffic-flow issues
Manage change requests, including risk assessment, implementation, and rollback planning
Build, troubleshoot, and maintain site-to-site IPSec VPN tunnels using IKEv1/IKEv2
Configure and manage static, dynamic, PAT, and policy-based NAT
Implement and support policy-based routing and traffic-steering functions
Support remote access VPN, including GlobalProtect and Cisco AnyConnect
Support and administer Palo Alto Prisma Access, including remote networks, mobile users, and policy alignment with on-premises firewalls
Contribute to SASE and zero-trust architecture adoption and evolution
Manage and tune Cloudflare WAF rules, rate limiting, bot management, and custom rulesets
Configure and support WAF and threat-prevention features, including URL filtering, IPS, and application-layer controls
Investigate false positives and security events and work with application teams on remediation
Respond to security incidents involving firewall or perimeter controls
Support audits and compliance requirements with evidence, rule reviews, and configuration reports
Maintain accurate network diagrams, runbooks, and standards documentation
Mentor junior engineers and act as an escalation point for complex issues

Requirements

What you’ll need

7+ years of hands-on experience in network security or firewall engineering
Strong, proven experience administering Palo Alto Networks firewalls and Cisco ASA firewalls
Solid experience with IPSec VPN tunnels, NAT, and policy-based routing
Strong understanding of networking fundamentals: TCP/IP, routing (static, BGP, OSPF), VLANs, and subnetting
Working knowledge of SASE solutions, particularly Palo Alto Prisma Access
Experience supporting a WAF, including Cloudflare, and application-layer security on firewalls
Strong troubleshooting skills, including packet captures and log analysis
Clear written and verbal communication, and the ability to work independently
Preferred: A relevant certification such as PCNSE, Cisco CCNP Security, or CCIE Security
Preferred: Experience with Panorama, Strata Cloud Manager, or Cisco FMC/FTD
Preferred: Familiarity with cloud networking (AWS, Azure, or GCP) and cloud-native firewalls
Preferred: Experience with automation or scripting (Python, Ansible, Terraform, or APIs) for firewall management
Preferred: Knowledge of zero-trust principles, SD-WAN, and frameworks such as NIST or ISO 27001
Shortlisted candidates may need to complete an assessment
Must consent to credit and criminal record checks
Must consent to qualification verification

Benefits

Comp & perks

Talent Management and Talent Development Programme relevance applied as part of the recruitment process
Confidential credit and criminal record checks
Qualification verification check