What you’ll be doing

- Lead the end-to-end lifecycle of Palo Alto firewall and Cisco ISE deployments and migrations, including assessment, design, implementation, testing and validation.
- Perform firewall policy optimisation, upgrades and cross-vendor migrations while minimising operational risk and service disruption.
- Validate implemented solutions through structured testing as part of the standard change process, ensuring compliance with security, quality and operational standards.
- Help develop network segmentation strategy, and support secure VPN and remote access design.
- Engage directly with customers to gather requirements and provide technical consultation, owning detailed design and hands-on implementation, and presenting design decisions and recommendations directly to stakeholders.
- Produce handover and knowledge transfer documentation at project milestones and when engagements close.
- Ramp up quickly across different client environments and toolsets, working closely with security, network and vendor teams to keep delivery secure by design.

Essential

- Excellent written and verbal communication skills, backed by previous experience in a client-facing consulting or professional services role, with the confidence to lead client design discussions independently.
- Deep, hands-on expertise in Palo Alto Firewalls, including Panorama, App-ID and threat prevention.
- Strong hands-on expertise in Cisco ISE,



including 802.1X and TrustSec policy enforcement.
- Ability to design and implement network segmentation, VPN and secure remote access solutions.
- Proven experience delivering enterprise network projects end-to-end, within complex, large-scale environments, with the ability to ramp up quickly in unfamiliar client settings.
- Strong troubleshooting and problem-solving skills, backed by transparent technical documentation, including handover and knowledge transfer materials.
- Ability to work collaboratively with engineering teams and project stakeholders.
- Willingness to undergo background checks before starting the contract.

Highly Desirable

- Familiarity working within data centre network and firewall environments.
- Multi-vendor firewall experience beyond Palo Alto, such as Cisco FTD/FMC or Fortinet FortiGate, including experience migrating firewall policies between vendor platforms.
- Broader network engineering depth, including Cisco or Juniper routing and switching, OSPF/BGP, and wireless network security, as supporting infrastructure knowledge.
- 8 or more years of network security engineering experience, ideally backed by a vendor certification such as CCNP Security, CCIE Security or PCNSE.
- Strong automation and scripting skills (Python, Bash, Ansible) for streamlining firewall and network security tasks.

📌 Senior Network Security Engineer (Sydney)
🏢 Nityo Infotech
📍 Sydney