Firewall Engineer

Insight Global is seeking a Firewall Platform Engineer for Ecolab’s Global Network Services (GNS) Delivery team. This is a firewall-focused, US-only role centered on deep hands-on Palo Alto (Panorama, and StrataCloud Manager a plus), supported by strong enterprise networking, security, scripting, and disaster-recovery skills. You’ll plan, implement, and maintain the firewall platforms that keep Ecolab’s global operations secure and resilient, with on-call support for critical incidents.

Key Responsibilities:
- Firewall delivery: Install, configure, and maintain Palo Alto firewalls (Panorama; StrataCloud Manager a plus) to security best practices.
- Networking foundation: Support enterprise networking - LAN/WAN, VPN, DNS, TCP/IP; routers, switches, firewalls.
- Security & compliance: Manage firewall rules and access controls, apply security patches, and remediate vulnerabilities and compliance gaps.
- Automation: Automate deployments, configuration, and patching with scripting (Python/PowerShell/Bash) and IaC (Ansible/Terraform).
- Troubleshooting & on-call: Diagnose and resolve firewall/network issues, including on-call for critical incidents; restore service quickly.
- DR & business continuity: Execute and test recovery procedures; own restoration during major incidents and update runbooks.
- Documentation & collaboration: Maintain standards and runbooks; partner with app, dev, and IT teams.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

- 7-10 years in platform, network, or systems engineering (nothing less than 5).
- Strong hands-on Palo Alto firewalls and Panorama, with advanced troubleshooting.
- Enterprise networking - LAN/WAN, VPN, DNS, TCP/IP; routers, switches, firewalls; firewall + cloud networking experience.
- Scripting (Python, PowerShell, or Bash) and IaC / configuration management (Ansible, Terraform, or CI/CD).
- Solid IT security principles - authentication, authorization, encryption, and network segmentation.
- Backup/recovery and disaster-recovery planning or drills.
- Strong troubleshooting, root-cause analysis, and communication skills.

- StrataCloud Manager (SCM) experience
- Server administration (Windows and/or Linux) and Bluecat/DNS
- Certifications - Cisco CCNA/CCNP, Microsoft Azure Administrator, Linux, or security
- Multilingual - Spanish or Mandarin

Benefit packages for this role will start on the 1st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.