Senior Palo Alto Firewall Security Engineer

Amex GBT is a place where colleagues find inspiration in travel as a force for good and – through their work – can make an impact on our industry. We're here to help our colleagues achieve success and offer an inclusive and collaborative culture where your voice is valued.

We are seeking a highly skilled Senior Palo Alto Firewall Security Architect/Engineer to lead and evolve our global enterprise security infrastructure. This position focuses on the architecture, implementation, and optimization of Palo Alto Network technologies

What You'll Do

• Design, engineer, and manage enterprise-wide Palo Alto firewall infrastructure, including physical, virtual, and cloud-native deployments.
• Develop and maintain Panorama configurations, , shared device group hierarchy's policies, and centralized templates.
• Lead the global deployment and optimization of Prisma Access, including Secure Browser, Mobile User Multi Factor Authentication (MFA).
• Integrate and operationalize Strata Cloud Manager and Cortex XDR/XSOAR solutions for improved visibility, response, and policy enforcement.
• Engineer and support Palo Alto SD-WAN for secure and efficient branch connectivity.
• Collaborate with cross-functional teams (Cloud, Network, Security Ops) to implement virtual routing, policy segmentation, and secure cloud access (AWS and Azure).
• Establish and document standard configurations, templates, and procedures that support compliance, scalability, and automation.
• Proactively identify, troubleshoot, and resolve issues impacting firewall and network security performance and availability.
• Participate in security architecture reviews and contribute to the long-term roadmap for enterprise network security.

What We're Looking For

• 7+ years of hands-on experience with Palo Alto Networks firewalls in an enterprise or service provider environment.
• Expert-level proficiency with:
  • Panorama (device groups, templates, shared policies)
  • Prisma Access (including Secure Browser and Mobile User deployments)
  • Palo Alto SD-WAN
  • Virtual routing (VRFs, PBF, ECMP)
  • Strata Cloud Manager, AIOps, ADEM
  • Proven experience with cloud-based deployments (AWS and Azure) integrating Palo Alto NGFW and Prisma.
  • Deep understanding of Layer 3–7 firewall policies, NAT, IPSec/SSL VPNs, and threat prevention.
  • Ability to lead security engineering initiatives across global teams

Location

The #TeamGBT Experience

Work and life: Find your happy medium at Amex GBT.

• Flexible benefits are tailored to each country and start the day you do. These include health and welfare insurance plans, retirement programs, parental leave, adoption assistance, and wellbeing resources to support you and your immediate family.

• Travel perks: get a choice of deals each week from major travel providers on everything from flights to hotels to cruises and car rentals.

• Develop the skills you want when the time is right for you, with access to over 20,000 courses on our learning platform, leadership courses, and new job openings available to internal candidates first.

• We strive to champion Inclusion in every aspect of our business at Amex GBT. You can connect with colleagues through our global INclusion Groups, centered around common identities or initiatives, to discuss challenges, obstacles, achievements, and drive company awareness and action.

• And much more

All applicants will receive equal consideration for employment without regard to age, sex, gender (and characteristics related to sex and gender), pregnancy (and related medical conditions), race, color, citizenship, religion, disability, or any other class or characteristic protected by law.

Click Here for Additional Disclosures in Accordance with the LA County Fair Chance Ordinance.

Furthermore, we are committed to providing reasonable accommodation to qualified individuals with disabilities. Please let your recruiter know if you need an accommodation at any point during the hiring process. For details regarding how we protect your data, please consult the Amex GBT Recruitment Privacy Statement.

What if I don't meet every requirement? If you're passionate about our mission and believe you'd be a phenomenal addition to our team, don't worry about "checking every box;" please apply anyway. You may be exactly the person we're looking for