IPSec VPN L3 SME – Palo Alto & Cisco [Security Technical SME – L3]
Job Title: IPSec VPN L3 SME – Palo Alto & Cisco [Security Technical SME – L3]
Location: Melbourne, Australia
Experience Level: Senior (L3 Support / SME)
Role Overview
As aPalo Alto & Cisco IPSec VPN L3 SME, you will lead the design, deployment, and optimization of secure VPN architectures for enterprise and customer environments.
You'll ensure high availability, scalability, and security across diverse deployment models usingPalo Alto NetworksandCisco ASA/Firepowerplatforms.Key Responsibilities
IPSec VPN Design & Deployment
Architect and implementIPSec VPN solutionsfor recent and existing customers, ensuring secure and reliable connectivity across hybrid infrastructures.
Multi-Model Support
Configure and support various VPN deployment models including:Site-to-Site (S2S)
Tunnel Interfaces (SVTI/VTI)
Multi-site topologies
Cross-connection architecturesfor complex enterprise environments
Best Practice Implementation
Apply industry-standard design principles for:Resiliency(failover, HA configurations)
Scalability(dynamic routing, policy-based VPNs)
Security(strong encryption, authentication, and access control)
Platform ExpertiseConfigure and troubleshootPalo Alto VPNsusing IKEv2/IPSec, tunnel monitoring,



and App-ID policies
AdministerCisco ASA/Firepower VPNs, including crypto maps, tunnel groups, and NAT traversal
Integrate VPNs withrouting protocols(OSPF, BGP) andidentity platforms(RADIUS, LDAP, SAML)
Advanced Troubleshooting & Escalation
Serve as theL3 escalation pointfor VPN-related incidents, performing packet-level diagnostics and root cause analysis.
Documentation & Compliance
Maintain detailed design documents, runbooks, and change records to support audits and compliance frameworks (ISO *****, NIST, PCI-DSS).
Required Skills & Qualifications
5+ years innetwork security engineering, with deep expertise in IPSec VPNs
Hands-on experience with:Palo Alto Networks firewalls(PAN-OS, GlobalProtect, tunnel monitoring)
Cisco ASA/Firepower(CLI and ASDM)
IPSec/IKEv2 protocols,crypto profiles, androuting integration
Strong understanding of:High availability,failover mechanisms, andredundant VPN design
Firewall rule tuning,NAT policies, andQoS for VPN traffic
Monitoring tools(Panorama, Cisco FMC, SNMP, syslog)
Preferred Certifications
PCNSE(Palo Alto Networks Certified Network Security Engineer)
CCNP Security / CCIE Security(Cisco)
CISSP,CCSP, orCEH
#J-*****-Ljbffr

📌 Ipsec VpnSme – Palo Alto & Cisco [Security Technical Sme – (Melbourne)
🏢 Recruit CRM
📍 Melbourne