Proxy L2 Engineer

Job Summary
The Proxy L2 Engineer will provide operational support for managing, configuring, and optimizing web proxies, and security solutions to ensure secure and efficient network traffic flow.

Key Responsibilities

1. Proxy Administration
   • Configure, manage, and optimize Palo Alto Networks Next-Generation Firewalls (NGFW).
   • Manage proxy solutions (e.g., Palo Alto Prisma Access, Blue Coat, Zscaler, Squid, or Forcepoint Web Proxy) for secure web traffic filtering.
   • Monitor and troubleshoot URL filtering, SSL decryption, and application control policies.
   • Implement user authentication and access control policies using LDAP, SAML, or RADIUS.
2. Network Security & Threat Mitigation
   • Investigate escalated security incidents related to proxy filtering, web access control, and firewall policies.
   • Work with SIEM tools (Splunk, QRadar, ELK, etc.) to analyze firewall and proxy logs.
   • Monitor threat intelligence feeds and respond to web security threats such as malware, phishing, and data leaks.
   • Collaborate with SOC teams for threat analysis and proactive defense strategies.
3. Proxy Policy Optimization
   • Tune URL filtering categories, content inspection policies, and SSL decryption to balance security and performance.
   • Manage whitelisting/blacklisting of websites, applications, and IPs.
   • Analyze bandwidth usage and optimize traffic routing via proxy and firewall policies.
   • Ensure security configurations align with best practices and compliance standards.
4. Security Compliance & Documentation
   • Ensure compliance with security frameworks.
   • Maintain and update security documentation, SOPs, and incident response playbooks.
   • Assist in security audits, risk assessments, and log reviews for forensic investigations.
5. Performance Monitoring & System Health Checks
   • Monitor firewall and proxy logs, alerts, and system performance metrics.
   • Perform regular policy reviews, patching, and firmware upgrades on Palo Alto firewalls and proxy solutions.
   • Troubleshoot connectivity issues, application slowdowns, and SSL decryption errors.

Job Requirement

Education & Certification Requirements
1. Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
2. Preferred Certifications
• Palo Alto Networks Certified Network Security Administrator (PCNSA)
• Palo Alto Networks Certified Network Security Engineer (PCNSE)
• CompTIA Security+ / CISSP / CEH (for general security knowledge)

Technical Skills:
• Hands-on experience with Palo Alto Networks firewalls (PAN-OS, Panorama, Prisma Access).
• Knowledge of proxy solutions (Palo Alto Prisma Access)
• Strong understanding of SSL decryption, URL filtering, application control, and content inspection.
• Proficiency in firewall rule management, NAT, VPN configurations, and threat prevention.
• Experience in SIEM log analysis, threat hunting, and web security monitoring.
• Familiarity with network protocols (HTTP, HTTPS, TCP/IP, DNS, VPNs, BGP, OSPF).

Soft Skills
• Strong troubleshooting and analytical skills.
• Ability to work under pressure and handle escalated security incidents.
• Excellent documentation and communication skills.
• Team player with a proactive approach to security enhancement.

Experience Requirements
• 2-5 years of experience in network security, firewall administration, and proxy solutions.
• Prior experience in Palo Alto NGFW and web proxy filtering.