Apply for Senior Network Security Consultant, Palo Alto Networks

On behalf of our client Affinity is seeking a Senior Network Security Consultant to lead an enterprise firewall modernization engagements across our client base. You'll own the full delivery lifecycle — from architecture and requirements through migration and cutover — with deep hands-on expertise in Palo Alto Networks platforms. This is a client-facing consulting role for someone who can both design the solution and execute it.

Responsibilities:

• Lead customer engagements end to end: discovery, architecture design, requirements gathering, and delivery.
• Design and execute firewall migrations from Check Point and Cisco (ASA/Firepower) to Palo Alto Networks.
• Architect and implement Palo Alto high-availability designs, and plan/execute multi-region firewall migrations.
• Enable and tune advanced Palo Alto capabilities — TLS/SSL decryption and inspection, WildFire, App-ID, and related Next-Gen features.
• Extensive experience enabling TLS on enterprise customers to minimize rollout impact.
• Able to integrate Palo Alto with Strata Cloud Management and full pro capabilities.
• Provide onsite support and after-hours coverage during migration and cutover windows.
• Act as the trusted technical advisor to enterprise clients, translating business requirements into secure, scalable network architectures.

Qualifications:

• Fluent French and English (spoken and written).
• Strong, demonstrable expertise with Palo Alto Networks firewalls in enterprise environments.
• Proven track record of multiple Check Point and Cisco-to-Palo Alto migrations.
• Hands-on experience enabling advanced capabilities: TLS inspection, WildFire, App-ID.
• Excellent understanding of Palo Alto high-availability design, with experience migrating many firewalls across different regions.
• Strong consulting background — able to lead customers, define architecture and requirements, and own delivery.
• Enterprise-scale experience (required).
• Willingness to work onsite and provide after-hours support during firewall migrations.
• Advanced enterprise routing experience with BGP, EIGRP, OSPF, route redistribution, route filtering, summarization, and path selection.
• Strong understanding of hybrid cloud connectivity, including AWS Direct Connect, Azure ExpressRoute, VPN, private peering, and redundant circuit design.
• Experience designing and supporting AWS Transit Gateway, including VPC attachments, route tables, segmentation, and centralized inspection patterns.
• Hands-on knowledge of Azure hub-and-spoke networking, ExpressRoute gateways, route propagation, UDRs, NSGs, and firewall integration.
• Ability to troubleshoot complex routing issues across on-premises data centers, cloud networks, firewalls, SD-WAN, and VPN tunnels.
• Strong skills in high availability network design, failover testing, resilient routing, and multi-region/multi-cloud connectivity.
• Automation skills, Ansible, IaC, Terraform.

Affinity Earn:

Know someone who’s great for this, or any of our open roles? Earn up to $4,000/year for each successful referral through Affinity Earn. You can also earn up to $50,000 for helping us find new clients. Learn about our referral program at https://affinity-group.ca/earn/ or browse our jobs & follow us at https://www.linkedin.com/company/affinity-staffing/jobs/

About Affinity: 

Affinity Group is a technology and business consulting and services company. We believe in creating long term relationships between clients and consultants that foster a mutually beneficial partnership. Affinity is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All employment is decided on the basis of qualifications, merit and business need.

For more information on Affinity, please visit www.affinity-group.ca

Job Number: 13657