Network Security Consultant

• We are seeking an experienced Network Security Consultant to support an enterprise network built on Palo Alto Networks security infrastructure integrated with Microsoft Azure, spanning corporate headquarters and remote offices across the US, EU, and Asia.
• The consultant will serve as the technical authority for firewall architecture, secure connectivity, and cloud network design across globally distributed sites.

• Design, deploy, and maintain Palo Alto Networks NGFW (physical and VM-Series) infrastructure across on-premises and Azure environments.
• Architect and manage site-to-site VPN and dynamic routing (BGP/OSPF) between regional offices, data centers, and Azure VNets.
• Configure and support GlobalProtect for secure remote-user access, including client IP pool management and route redistribution into BGP/OSPF.
• Design and manage Azure networking components: VNets, VNet peering, ExpressRoute, Azure VPN Gateway, Route Tables (UDRs), NSGs, and Azure Firewall where applicable.
• Build and maintain multi-region connectivity architecture (hub-and-spoke or mesh) linking US, EU, and Asia offices with consistent security policy and low-latency routing.
• Manage centralized policy and logging via Panorama, ensuring consistent security posture across all sites.
• Own routing design and troubleshooting for BGP peering between Palo Alto virtual routers and Azure/ExpressRoute circuits or third-party carriers.
• Support network segmentation, Zero Trust principles, and security zone design across cloud and branch environments.
• Troubleshoot cross-region connectivity, latency, and routing issues, coordinating with regional IT/network teams and ISPs.
• Produce and maintain network architecture documentation, runbooks, and change management records.
• Participate in security audits, vulnerability remediation, and compliance initiatives (e.g., SOC 2, ISO 27001, GDPR considerations for EU sites).

• 5+ years of hands-on experience with Palo Alto Networks firewalls (PAN-OS), including Panorama management.
• Strong working knowledge of GlobalProtect architecture (portal/gateway design, IP pools, split tunneling, redistribution).
• Solid understanding of dynamic routing protocols, particularly BGP (route redistribution, filtering, multi-homed peering); OSPF a plus.
• Demonstrated experience with Microsoft Azure networking: VNets, ExpressRoute, VPN Gateway, NSGs, Route Tables, Azure Firewall/Front Door (as applicable).
• Experience designing and supporting multi-region WAN/VPN architectures connecting offices across multiple continents.
• Familiarity with SD-WAN concepts and technologies is a plus.
• Working knowledge of IPSec VPN design, GRE tunnels, and Transit-style hub-and-spoke topologies.
• Experience supporting distributed teams and working across US, EU, and Asia time zones.
• Strong troubleshooting skills using CLI (PAN-OS), packet captures, and routing table analysis.
• Excellent documentation and stakeholder communication skills.

• PCNSE (Palo Alto Networks Certified Network Security Engineer)
• Microsoft Certified: Azure Network Engineer Associate (or equivalent Azure networking certification)
• CCNP / JNCIP or equivalent routing/switching certification (Juniper experience a plus)

About ApTask:
ApTask is a leading global provider of workforce solutions and talent acquisition services, dedicated to shaping the future of work. As an African American-owned and Veteran-owned company, ApTask offers a comprehensive suite of services, including staffing and recruitment solutions, managed services, IT consulting, and project management. With a focus on excellence, collaboration, and innovation, ApTask provides unparalleled opportunities for professional growth and development. As a member of the ApTask team, you will have the chance to connect businesses with top-tier professionals, optimize workforce performance, and drive success across diverse industries. Join us at ApTask and be part of our mission to empower organizations to thrive while fostering a diverse and inclusive work environment.

Applicants may be required to attend interviews in person or by video conference. In addition, candidates may be required to present their current state or government issued ID during each interview.

Candidate Data Collection Disclaimer:
At ApTask, we prioritize safeguarding your privacy. As part of our recruitment process, certain Personally Identifiable Information (PII) may be requested by our clients for verification and application purposes. Rest assured, we strictly adhere to confidentiality standards and comply with all relevant data protection laws. Please note that we only collect the necessary information as specified by each client and do not request sensitive details during the initial stages of recruitment.

If you have any concerns or queries about your personal information, please feel free to contact our compliance team atcompliance@aptask.com.

Applicant Consent:
By submitting your application, you agree to ApTask's (www.aptask.com)Terms of Use andPrivacy Policy, and provide your consent to receive SMS and voice call communications regarding employment opportunities that match your resume and qualifications. You understand that your personal information will be used solely for recruitment purposes and that you can withdraw your consent at any time by contacting us at 732-355-8000 or help@aptask.com. Message frequency may vary. Msg & data rates may apply.