Jobs › Companies › digiOutsource › Senior Firewall Engineer

Über diese Senior Firewall Engineer Stelle bei digiOutsource

digiOutsource · Vor Ort · Johannesburg

Kick-start your career in the online gaming world and experience the very latest in technology and innovation.

Firewall Administration and Support

  • Manage, support, and maintain Palo Alto Networks (Panorama and standalone) and Cisco ASA firewalls in production environments
  • Create, review, and optimize security policies, following least-privilege principles and cleaning up redundant or overly permissive rules
  • Perform firmware and OS upgrades, patching, and high-availability (HA) failover testing
  • Implement new firewalls where required.
  • Monitor firewall health, performance, and logs, and troubleshoot connectivity and traffic-flow issues
  • Manage change requests, including risk assessment, implementation, and rollback planning

VPN, NAT, and Routing

  • Build, troubleshoot, and maintain site-to-site IPSec VPN tunnels (IKEv1/IKEv2) with partners, vendors, and cloud providers
  • Configure and manage NAT (static, dynamic, PAT, and policy-based NAT) across platforms
  • Implement and support policy-based routing and related traffic-steering functions
  • Support remote access VPN, including GlobalProtect and Cisco AnyConnect

SASE and Cloud Security

  • Support and administer Palo Alto Prisma Access, including remote networks, mobile users, and policy alignment with on-prem firewalls
  • Contribute to the adoption and evolution of SASE and zero-trust architectures

Web Application Firewall (WAF)

  • Manage and tune Cloudflare WAF rules, rate limiting, bot management, and custom rulesets
  • Configure and support WAF and threat-prevention features on the firewalls (e.g., URL filtering, IPS, and application-layer controls)
  • Investigate false positives and security events, and work with application teams on remediation

Security, Documentation, and Collaboration

  • Respond to security incidents involving firewall or perimeter controls
  • Support audits and compliance requirements with evidence, rule reviews, and configuration reports
  • Maintain accurate network diagrams, runbooks, and standards documentation
  • Mentor junior engineers and act as an escalation point for complex issues

Required Qualifications

  • 7+ years of hands-on experience in network security or firewall engineering
  • Strong, proven experience administering Palo Alto Networks firewalls and Cisco ASA firewalls
  • Solid experience with IPSec VPN tunnels, NAT, and policy-based routing
  • Strong understanding of networking fundamentals: TCP/IP, routing (static, BGP, OSPF), VLANs, and subnetting
  • Working knowledge of SASE solutions, particularly Palo Alto Prisma Access
  • Experience supporting a WAF, including Cloudflare, and application-layer security on firewalls
  • Strong troubleshooting skills, including packet captures and log analysis
  • Clear written and verbal communication, and the ability to work independently

Preferred Qualifications

  • A relevant certification, such as:
  • Palo Alto Networks Certified Network Security Engineer (PCNSE)
  • Cisco CCNP Security or CCIE Security
  • Experience with Panorama, Strata Cloud Manager, or Cisco FMC/FTD
  • Familiarity with cloud networking (AWS, Azure, or GCP) and cloud-native firewalls
  • Experience with automation or scripting (Python, Ansible, Terraform, or APIs) for firewall management
  • Knowledge of zero-trust principles, SD-WAN, and frameworks such as NIST or ISO 27001


*Please note we will apply relevance to our Talent Management and Talent Development Programme as part of our recruitment process.

*Shortlisted candidates may need to complete an assessment.
 

This position requires trust and honesty it has access to customers financial details - therefore a credit and criminal record check will be conducted. The qualifications identified herein are an inherent job requirement; therefore, a qualification verification check will be done. By applying for this role, and supplying the necessary details, you hereby grant us permission to apply for these checks. This will be done in a confidential manner, and solely for the purposes of verification.


Should you not hear from us within 2 weeks, please deem your application as unsuccessful.

The perfect place to work, play and grow!

Bereit, sich bei digiOutsource zu bewerben?
Bei digiOutsource bewerben

Über digiOutsource

We believe in hiring talented, hardworking and ambitious people from all over the world. In return, we ensure a supportive working environment, access to leading edge technologies and a commitment to social awareness and equity. Working in this unique and highly competitive industry means that we have to take risks and be innovative. The way we do this is by allowing for mistakes, but also making sure we learn from them. And with a multi-cultural workforce that’s unparalleled in its diversity and dynamism, we also offer plenty of scope to grow on a personal level too. Best of all, we do this while enjoying ourselves as much as possible!

Alle Jobs bei digiOutsource ansehen →

Ähnliche Jobs

Registrieren für Vorschläge, die auf die von Ihnen geöffneten Jobs und gespeicherten Suchen zugeschnitten sind.

Mehr Jobs bei digiOutsource

Alle Jobs bei digiOutsource ansehen →

Jetzt bewerben
🤖

Moment — langsam

JobsRadar wurde für echte Menschen gebaut, die eine schwere Zeit bei der Jobsuche haben — nicht für automatisierte Anfragen. Sie klicken viel zu schnell und sind jetzt vorübergehend blockiert.

Kommen Sie später wieder. Wenn Sie wirklich auf Jobsuche sind, stehen wir hinter Ihnen — verhalten Sie sich einfach wie ein Mensch.

Catch your next role the second it’s posted.

Create a free account and we’ll watch the boards for you — the instant a job matches your search, it lands in your inbox or Telegram. No digging, no refreshing.

Create free account

Free forever · takes 30 seconds · already have one?

Verschaffe dir einen Vorsprung bei der Jobsuche.

Tritt unserem Telegram-Kanal bei für das, was dir hilft, die Stelle zu bekommen — Gehaltsbenchmarks, den wöchentlichen Marktpuls und neue Feature-Drops. Kein Spam, nur Signal.

Dem Kanal beitreten — kostenlos