Palo Alto

5 days ago


Melbourne, Victoria, Australia Tech Aalto Full time $120,000 - $180,000 per year

Job Title: IPSec VPN L3 SME – Palo Alto & Cisco [Security Technical SME – L3]

Location: Melbourne, Australia

Experience Level: Senior (L3 Support / SME)

Role Overview

As a
Palo Alto & Cisco IPSec VPN L3 SME
, you will lead the design, deployment, and optimization of secure VPN architectures for enterprise and customer environments. You'll ensure high availability, scalability, and security across diverse deployment models using
Palo Alto Networks
and
Cisco ASA/Firepower
platforms.

Key Responsibilities

  • IPSec VPN Design & Deployment
  • Architect and implement
    IPSec VPN solutions
    for new and existing customers, ensuring secure and reliable connectivity across hybrid infrastructures.
  • Multi-Model Support
  • Configure and support various VPN deployment models including:
  • Site-to-Site (S2S)
  • Tunnel Interfaces (SVTI/VTI)
  • Multi-site topologies
  • Cross-connection architectures
    for complex enterprise environments
  • Best Practice Implementation
  • Apply industry-standard design principles for:
  • Resiliency
    (failover, HA configurations)
  • Scalability
    (dynamic routing, policy-based VPNs)
  • Security
    (strong encryption, authentication, and access control)
  • Platform Expertise
  • Configure and troubleshoot
    Palo Alto VPNs
    using IKEv2/IPSec, tunnel monitoring, and App-ID policies
  • Administer
    Cisco ASA/Firepower VPNs
    , including crypto maps, tunnel groups, and NAT traversal
  • Integrate VPNs with
    routing protocols
    (OSPF, BGP) and
    identity platforms
    (RADIUS, LDAP, SAML)
  • Advanced Troubleshooting & Escalation
  • Serve as the
    L3 escalation point
    for VPN-related incidents, performing packet-level diagnostics and root cause analysis.
  • Documentation & Compliance
  • Maintain detailed design documents, runbooks, and change records to support audits and compliance frameworks (ISO 27001, NIST, PCI-DSS).

Required Skills & Qualifications

  • 5+ years in
    network security engineering
    , with deep expertise in IPSec VPNs
  • Hands-on experience with:
  • Palo Alto Networks firewalls
    (PAN-OS, GlobalProtect, tunnel monitoring)
  • Cisco ASA/Firepower
    (CLI and ASDM)
  • IPSec/IKEv2 protocols
    ,
    crypto profiles
    , and
    routing integration
  • Strong understanding of:
  • High availability
    ,
    failover mechanisms
    , and
    redundant VPN design
  • Firewall rule tuning
    ,
    NAT policies
    , and
    QoS for VPN traffic
  • Monitoring tools
    (Panorama, Cisco FMC, SNMP, syslog)

Preferred Certifications

  • PCNSE
    (Palo Alto Networks Certified Network Security Engineer)
  • CCNP Security / CCIE Security
    (Cisco)
  • CISSP
    ,
    CCSP
    , or
    CEH

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the Tech Aalto Privacy Policy, a copy of which is published at Tech Aalto's website )

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.



  • Melbourne, Victoria, Australia Delivery Centric Pty Ltd Full time $120,000 - $180,000 per year

    Delivery Centric is seeking a skilled Security Technical SME – L2 with deep expertise in Palo Alto Global Protect and Cisco AnyConnect. The role focuses on managing and securing enterprise remote access infrastructure, ensuring VPN connectivity is compliant, policy-driven, and aligned with organizational security standards. The ideal candidate will bring...


  • Melbourne, Victoria, Australia Palo Alto Networks Full time $120,000 - $180,000 per year

    Company Description Our MissionAt Palo Alto Networks everything starts and ends with our mission:Being the cybersecurity partner of choice, protecting our digital way of life.Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and...


  • Melbourne, Victoria, Australia Palo Alto Networks Full time

    Company Description Our MissionAt Palo Alto Networks everything starts and ends with our mission:Being the cybersecurity partner of choice, protecting our digital way of life.Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and...


  • Melbourne, Victoria, Australia Palo Alto Networks Full time $100,000 - $150,000 per year

    Company Description Our MissionAt Palo Alto Networks everything starts and ends with our mission:Being the cybersecurity partner of choice, protecting our digital way of life.Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and...


  • Melbourne, Victoria, Australia Palo Alto Networks Full time $80,000 - $120,000 per year

    Company DescriptionOur MissionAt Palo Alto Networks everything starts and ends with our mission:Being the cybersecurity partner of choice, protecting our digital way of life.Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and...


  • Melbourne, Victoria, Australia Palo Alto Networks Full time

    Company Description Our MissionAt Palo Alto Networks everything starts and ends with our mission:Being the cybersecurity partner of choice, protecting our digital way of life.Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and...


  • Melbourne, Victoria, Australia CareCone Group Full time $120,000 - $180,000 per year

    Hiring forCisco ACI Firewall Engineer.Location- Sydney & MelbournePosition- PermanentJD-DescriptionExperience: 7+ yearsGood understanding and proven experience in hands-on with the below technology StackCisco ACICisco Firepower Threat Defense (FTD)Cisco Nexus 7K & 9KCheckpoint FirewallsPalo Alto FirewallsNetskope ZTNA/SASECisco ISR & ASR RoutersMust have...


  • Melbourne, Victoria, Australia Resource Corner Full time $120,000 - $180,000 per year

    Role: CISCO ACI Firewall EngineerLocation: Sydney/MelbourneDuration: FulltimeSkills Required:(Essential – Non-negotiable)Good understanding and proven experience in hands-on with the below technology StackCisco ACICisco Firepower Threat Defense (FTD)Cisco Nexus 7K & 9KCheckpoint FirewallsPalo Alto FirewallsNetskope ZTNA/SASECisco ISR & ASR RoutersMust have...


  • Melbourne, Victoria, Australia CareCone Group Full time $120,000 - $180,000 per year

    Role: Network Security Technical SME (Palo Alto/Cisco)Location: MelbourneJob Description:Key ResponsibilitiesVPN Profile ProvisioningProvision and manage SSL VPN profiles for internal users and third-party vendors, ensuring secure and role-based access.Access Policy EnforcementDesign and implement fine-grained routing and firewall rules to control...


  • Melbourne, Victoria, Australia XPT Software Full time $120,000 - $140,000 per year

    Experience Level: Senior (L3 Implementation, Troubleshoot & Support)Role OverviewAs anSSL VPN L3 SME, you will lead the secure provisioning and governance of remote access infrastructure usingPalo Alto GlobalProtectandCisco AnyConnect. You'll ensure that VPN connectivity is tightly controlled, policy-driven, and aligned with enterprise security standards.Key...