Sr. Security Engineer – Palo Alto Strata Firewalls & Migration Specialist

Kyndryl • Atlanta, GA

2d • $138,480 - $263,160

About The Position

At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward – always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities. The Role At Kyndryl we’re seeking an experienced Palo Alto Networks Sr Security Engineer to lead and execute large‑scale firewall migrations for enterprise customers. In this role, you’ll take ownership of migrating legacy firewall environments to Palo Alto Strata NGFW , modernizing security policies, and strengthening customers’ overall security posture. You’ll be a hands-on engineer focused on migration execution, policy optimization, and best‑practice implementation across physical and virtual Palo Alto firewalls. While exposure to Prisma Access is helpful, this position is centered on Strata firewall migrations and enterprise NGFW deployments. Your Future at Kyndryl As a Security Engineer at Kyndryl you will join the Kyndryl Consultant Profession, working with other Kyndryl Consultants, Architects, Project Managers, and cross-functional Technical Subject Matter Experts – presenting unlimited opportunities with unmatched support through our investment in your learning, training, and career growth The compensation range for this position in the US is $138,480 to $263,160 based on a full-time schedule. Your actual compensation may vary depending on your geography, job-related skills, and experience. For part-time roles, the compensation will be adjusted appropriately. The pay or salary range will not be below any applicable state, city, or local minimum wage requirement. This position will be eligible for Kyndryl's discretionary annual bonus program, based on performance and subject to the terms of Kyndryl's applicable plans. You may also receive a comprehensive benefits package which includes medical and dental coverage, disability, retirement benefits, paid leave and paid time off. Note: if this is a sales commission eligible role, you will be eligible to participate in a sales commission plan in lieu of the annual discretionary bonus program. Applications will be accepted on a rolling basis. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Kyndryl currently does not require employees to be fully vaccinated against COVID-19, however, if you are hired to work at a client, customer, or partner location, you may be required to show proof of vaccination to align with their respective COVID-19 vaccination policies. Those who believe they are eligible may apply for a medical or religious accommodation prior to the start of employment. Who You Are You’re good at what you do and possess the required experience to prove it. However, equally as important – you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused – someone who prioritizes customer success in their work. And finally, you’re open and borderless – naturally inclusive in how you work with others.

Requirements

• 5+ years of experience in network and security engineering with strong hands‑on expertise in Palo Alto NGFW / Strata Firewalls .
• Proven experience performing firewall migrations and rulebase optimization in enterprise environments.
• Strong understanding of routing, NAT, VPNs, segmentation, and Layer 7 security controls.
• Hands‑on experience with Panorama , Expedition , and Palo Alto Best Practice Assessments.
• Solid understanding of Zero Trust concepts and modern security architectures.

Nice To Haves

• Exposure to Prisma Access , ZTNA, or cloud‑delivered security services.
• Experience integrating firewalls with AWS, Azure, or GCP environments.
• Certifications such as PCNSE, PCNSA, CISSP, CCSP, or CISM .
• Experience with automation or scripting (e.g., Python, Ansible).
• Bachelor’s degree or equivalent professional experience

Responsibilities

• Lead end‑to‑end migrations from legacy firewall platforms (ASA, Check Point, Fortinet, SonicWall, etc.) to Palo Alto Strata NGFW.
• Perform pre‑migration assessments, rule analysis, and configuration transformations using tools such as Expedition .
• Design and implement clean, optimized Palo Alto configurations including zones, routing, NAT, VPNs, HA, and security profiles.
• Execute cutovers, validate traffic flows, and provide post‑migration stabilization support.
• Analyze and rationalize existing firewall rulebases to eliminate redundancies, unused rules, and excessive access.
• Apply Zero Trust and least‑privilege principles using App‑ID, User‑ID, and identity‑based segmentation.
• Tune Threat Prevention, URL filtering, and WildFire to improve detection and reduce risk.
• Provide actionable recommendations to improve enterprise security posture.
• Troubleshoot complex network and security issues across Layers 3–7.
• Support firewall upgrades, best‑practice checks, and ongoing optimization initiatives.
• Develop and maintain deployment documentation, runbooks, and standardized Methods of Procedure (MOPs) .
• Partner with customers, architects, and internal delivery teams to gather requirements and validate designs.
• Communicate technical plans, risks, and changes clearly to both technical and non‑technical stakeholders.
• Mentor junior engineers and contribute to shared knowledge and delivery standards.

Benefits

• comprehensive benefits package which includes medical and dental coverage, disability, retirement benefits, paid leave and paid time off
• discretionary annual bonus program
• employee learning programs
• company-wide volunteering and giving platform

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level