Sr. Security Engineer – Palo Alto Strata Firewalls & Migration Specialist

Who We Are

At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward – always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.

The Role

At Kyndryl we’re seeking an experienced Palo Alto Networks Sr Security Engineer to lead and execute large‑scale firewall migrations for enterprise customers. In this role, you’ll take ownership of migrating legacy firewall environments to Palo Alto Strata NGFW, modernizing security policies, and strengthening customers’ overall security posture.

You’ll be a hands-on engineer focused on migration execution, policy optimization, and best‑practice implementation across physical and virtual Palo Alto firewalls. While exposure to Prisma Access is helpful, this position is centered on Strata firewall migrations and enterprise NGFW deployments.

Your Key Responsibilities Include:

Firewall Migration & Deployment

• Lead end‑to‑end migrations from legacy firewall platforms (ASA, Check Point, Fortinet, SonicWall, etc.) to Palo Alto Strata NGFW.
• Perform pre‑migration assessments, rule analysis, and configuration transformations using tools such as Expedition.
• Design and implement clean, optimized Palo Alto configurations including zones, routing, NAT, VPNs, HA, and security profiles.
• Execute cutovers, validate traffic flows, and provide post‑migration stabilization support.

Security Policy Optimization

• Analyze and rationalize existing firewall rulebases to eliminate redundancies, unused rules, and excessive access.
• Apply Zero Trust and least‑privilege principles using App‑ID, User‑ID, and identity‑based segmentation.
• Tune Threat Prevention, URL filtering, and WildFire to improve detection and reduce risk.
• Provide actionable recommendations to improve enterprise security posture.

Operations, Troubleshooting & Best Practices

• Troubleshoot complex network and security issues across Layers 3–7.
• Support firewall upgrades, best‑practice checks, and ongoing optimization initiatives.
• Develop and maintain deployment documentation, runbooks, and standardized Methods of Procedure (MOPs).

Collaboration & Technical Leadership

• Partner with customers, architects, and internal delivery teams to gather requirements and validate designs.
• Communicate technical plans, risks, and changes clearly to both technical and non‑technical stakeholders.
• Mentor junior engineers and contribute to shared knowledge and delivery standards.

Your Future at Kyndryl
As a Security Engineer at Kyndryl you will join the Kyndryl Consultant Profession, working with other Kyndryl Consultants, Architects, Project Managers, and cross-functional Technical Subject Matter Experts – presenting unlimited opportunities with unmatched support through our investment in your learning, training, and career growth

The compensation range for this position in the US is $138,480 to $263,160 based on a full-time schedule. Your actual compensation may vary depending on your geography, job-related skills, and experience.  For part-time roles, the compensation will be adjusted appropriately.  The pay or salary range will not be below any applicable state, city, or local minimum wage requirement.

This position will be eligible for Kyndryl's discretionary annual bonus program, based on performance and subject to the terms of Kyndryl's applicable plans.  You may also receive a comprehensive benefits package which includes medical and dental coverage, disability, retirement benefits, paid leave and paid time off.  Note: if this is a sales commission eligible role, you will be eligible to participate in a sales commission plan in lieu of the annual discretionary bonus program. Applications will be accepted on a rolling basis. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. 

Kyndryl currently does not require employees to be fully vaccinated against COVID-19, however, if you are hired to work at a client, customer, or partner location, you may be required to show proof of vaccination to align with their respective COVID-19 vaccination policies.  Those who believe they are el