Job Description & Details
This is a hands-on senior engineering role where you will be the go-to expert for enterprise network security and architecture. You won't just be pushing policies; you'll be actively designing, securing, and troubleshooting complex routing and firewall environments across a multi-vendor ecosystem.
What You'll Actually Be Doing
Your day-to-day will revolve around architecting secure network solutions, optimizing firewall rules, and handling critical incident troubleshooting. You'll spend a good amount of time in the Junos CLI configuring Juniper SRX firewalls and switches, managing high-availability setups, and coordinating dynamic routing protocols like BGP and OSPF. Beyond the technical execution, you'll also act as a technical SME, mentoring junior engineers, running risk assessments, and writing up solid architecture documentation.
The Core Tech Stack
You absolutely must live and breathe Juniper SRX firewalls and Juniper switching. This isn't a role where you can fake your way through the CLI. On top of that, strong Palo Alto firewall experience is heavily weighted, alongside a solid foundation in Cisco routing and switching. You will also need deep practical knowledge of BGP, OSPF, IPSec VPNs, and IDP/IPS configurations. If you bring some Python, Ansible, or Terraform automation skills to the table, you'll easily stand out from the rest of the applicants.
Interview Expectations
Expect the hiring team to test your deep routing and security architecture knowledge. They will likely present a scenario involving asymmetric routing over a multi-vendor site-to-site BGP VPN setup with overlapping NAT domains, asking you to trace the packet walk and troubleshoot a failure. The interviewer is secretly testing your structured troubleshooting methodology under pressure and how well you understand stateful firewall inspection across Juniper and Palo Alto platforms. Another favorite will be asking you to optimize a bloated, legacy firewall rulebase containing thousands of redundant entries without breaking active enterprise traffic.
Application Advice
Make sure your resume doesn't just list tools, but explicitly highlights your architecture and hands-on operational experience with Juniper SRX and Palo Alto gear. Use keywords like Junos CLI, high availability, BGP, OSPF, IDP/IPS, and NAT optimization directly in your bullet points to easily clear the ATS filters. Emphasize any complex migration projects or security upgrades you've personally led from conception to production.