Job Title: Senior Palo Alto GlobalProtect Engineer (L3)
Experience
6–8+ Years
Job Summary
#LI-SY4
We are seeking a Senior GlobalProtect Engineer to provide L3 support and technical leadership for Palo Alto GlobalProtect and Next Generation Firewall environments. The role involves advanced troubleshooting, platform administration, solution design support, major incident resolution, upgrades, and continuous improvement of the enterprise remote access infrastructure.
Key Responsibilities
. Provide L3 support for Palo Alto GlobalProtect infrastructure in large enterprise environments.
. Design, configure, and administer GlobalProtect Portal, Gateway, HIP Profiles, and VPN infrastructure.
. Troubleshoot complex VPN connectivity, routing, authentication, certificate, and performance issues.
. Configure and maintain Palo Alto Next Generation Firewalls, Security Policies, NAT Policies, and GlobalProtect configurations.
. Integrate GlobalProtect with Active Directory, LDAP, RADIUS, SAML, MFA, and certificate based authentication.
. Perform PAN OS upgrades, GlobalProtect client upgrades, firmware maintenance, and patch management.
. Configure and troubleshoot High Availability (HA), Gateway failover, and disaster recovery solutions.
. Analyze packet captures, firewall logs, and traffic flows using Wireshark and Palo Alto diagnostic tools.
. Optimize VPN performance, split tunneling, HIP policies, and security configurations.
. Support change implementation, release activities, and production deployments.
. Lead root cause analysis (RCA) for major incidents and implement permanent corrective actions.
. Develop automation scripts using PowerShell or Python for operational efficiency.
. Mentor L1/L2 engineers and provide technical guidance during incident resolution.
. Create architecture documentation, operational runbooks, and knowledge articles.
Required Skills
. 6–8+ years of hands on experience with Palo Alto GlobalProtect and NGFW.
. Strong expertise in GlobalProtect Portal, Gateway, HIP checks, Always On VPN, and Split Tunnel configurations.
. Advanced knowledge of PAN OS administration and Panorama.
. Strong understanding of TCP/IP, BGP, OSPF, NAT, DNS, SSL/IPSec VPN, and enterprise networking.
. Experience with SAML, LDAP, RADIUS, Active Directory, MFA, and certificate based authentication.
. Experience troubleshooting complex VPN, routing, firewall, and endpoint connectivity issues.
. Knowledge of Prisma Access, Zero Trust architecture, and cloud based remote access solutions is highly desirable.
. Experience performing packet analysis using Wireshark or tcpdump.
. Working knowledge of PowerShell or Python automation.
. Experience in ITIL environments, including incident, problem, and change management.
. PCNSA or PCNSE certification is preferred.
Your future duties and responsibilities
Required qualifications to be successful in this role
Together, as owners, let’s turn meaningful insights into action.
Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because…
You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction.
Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.
You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.
That same commitment to fairness extends to how we use technology. To support our recruitment team, AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals.
Come join our team—one of the largest IT and business consulting services firms in the world.
