Network Engineer III - IN (Palo Alto & FortiGate)

Job description

About Rackspace Cyber Defence Rackspace Cyber Defence is our next generation cyber defence and security operations capability that builds on 20+ years of securing customer environments to deliver proactive, risk-based, threat-informed and intelligence driven security services. Our purpose is to enable our customers to defend against the evolving threat landscape across on-premises, private cloud, public cloud and multi-cloud workloads. Our goal is to go beyond traditional security controls to deliver cloud-native, DevOps-centric and fully integrated 24x7x365 cyber defence capabilities that deliver a proactive , threat-informed , risk-based , intelligence-driven approach to detecting and responding to threats. Our mission is to help our customers: Proactively detect and respond to cyber-attacks – 24x7x365. Defend against new and emerging risks that impact their business. Reduce their attack surface across private cloud, hybrid cloud, public cloud, and multi-cloud environments. Reduce their exposure to risks that impact their identity and brand. Develop operational resilience. Maintain compliance with legal, regulatory and compliance obligations. Key Accountabilities Act as the highest level of technical escalation for complex network security and cloud security incidents across customer environments. Provide expert-level support and troubleshooting for Palo Alto, Fortinet, Azure networking, and hybrid network security infrastructures and architectures. Lead technical resolution of critical (P1/P2) incidents and major service outages, driving recovery activities and stakeholder communications. Perform deep-dive Root Cause Analysis (RCA) and recommend permanent corrective and preventive actions to improve service stability. Design, implement, and optimize secure network security architectures for customer environments across cloud, on-premises, and hybrid deployments. Lead customer onboarding activities involving complex network designs, large-scale migrations, and security transformation initiatives. Review and approve firewall policies, network segmentation strategies, VPN designs, security controls, and architecture changes. Provide governance and technical oversight for major changes, upgrades, migrations, and platform lifecycle management activities. Design and implement scalable solutions utilizing: Palo Alto VM-Series and Panorama FortiGate VM and FortiManager Azure Networking and Security Services Hybrid Connectivity Solutions Lead troubleshooting and optimization of: IPsec & Remote VPNs Static and dynamic routing SD-WAN & BGP Azure Routing Azure Load Balancing Network Performance Issues Security Policy Conflicts Drive continuous service improvement initiatives through automation, standardization, and operational excellence. Develop and maintain architecture standards, operational runbooks, design documentation, and knowledge repositories. Collaborate with Microsoft, Palo Alto, Fortinet, and other vendors for product escalations and advanced troubleshooting. Evaluate emerging security technologies and recommend enhancements to customer security posture. Act as a technical mentor for L1 and L2 engineers, providing coaching, reviews, and knowledge transfer sessions. Participate in customer technical governance meetings, architecture reviews, and strategic planning discussions. Support after-hours critical incidents, major projects, and planned maintenance activities when required. Skills & Experience Mandatory Technical Expertise 8+ years of hands-on experience in Network Security Engineering, Security Operations, or Security Architecture roles. Expert-level knowledge of: Palo Alto Networks VM-Series Firewalls Panorama Management Platform FortiGate VM Firewalls FortiManager Azure Networking and Security Services Advanced Azure Expertise Deep understanding of: Virtual Networks (VNets) Virtual WAN (vWAN) Route Tables Network Security Groups (NSGs) Azure Load Balancer Application Gateway (WAF) Azure Firewall VPN Gateway ExpressRoute Azure Route Server Private Endpoints Hub-and-Spoke Architectures Zero Trust Network Design Network Security Architecture Extensive experience designing and implementing: Enterprise Network Security Architectures Cloud-Native Security Solutions Hybrid Connectivity Solutions Segmentation and Micro-Segmentation Strategies Zero Trust Security Models Secure Internet Egress Architectures Multi-Cloud Connectivity Solutions Advanced Operational Skills Expert troubleshooting experience in: IPsec VPN SSL VPN Dynamic Routing NAT URL & APP-ID Feature and Function optimizations High Availability Clusters Performance Optimization Experience leading: Firewall migrations Cloud transformation projects Network modernization initiatives Security platform upgrades and refresh programs Automation & Engineering Good to have experience with automation and Infrastructure-as-Code solutions such as: PowerShell Python Terraform ARM/Bicep Templates Azure Automation Ability to design automated operational workflows and reduce manual effort through scripting and orchestration. Certifications (Preferred) Palo Alto Networks Palo Alto Networks Certified Network Security Engineer (PCNSE) Palo Alto Networks Cybersecurity Certified Expert (PCCSE) Fortinet Fortinet NSE 4+ / FCP Network Security Microsoft Microsoft Certified: Azure Network Engineer Associate (AZ-700) Microsoft Certified: Azure Fundamentals (AZ-900) Microsoft Certified: Azure Security Engineer Associate (AZ-500) Azure Solutions Architect Expert (AZ-305) Additional Security Certifications (Good to Have) CISSP CCSP CCNP Security CCIE Security Additional Security Certifications (Good to Have) CISSP CCSP CCNP Security CCIE Security About Rackspace Technology We are the multicloud solutions experts. We combine our expertise with the world’s leading technologies — across applications, data and security — to deliver end-to-end solutions. We have a proven record of advising customers based on their business challenges, designing solutions that scale, building and managing those solutions, and optimizing returns into the future. Named a best place to work, year after year according to Fortune, Forbes and Glassdoor, we attract and develop world-class talent. Join us on our mission to embrace technology, empower customers and deliver the future. More on Rackspace Technology Though we’re all different, Rackers thrive through our connection to a central goal: to be a valued member of a winning team on an inspiring mission. We bring our whole selves to work every day. And we embrace the notion that unique perspectives fuel innovation and enable us to best serve our customers and communities around the globe. We welcome you to apply today and want you to know that we are committed to offering equal employment opportunity without regard to age, color, disability, gender reassignment or identity or expression, genetic information, marital or civil partner status, pregnancy or maternity status, military or veteran status, nationality, ethnic or national origin, race, religion or belief, sexual orientation, or any legally protected characteristic. If you have a disability or special need that requires accommodation, please let us know.