Who We Are

At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward – always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.

The Role

At Kyndryl we’re seeking an experienced Palo Alto Networks Sr Security Engineer to lead and execute large‑scale firewall migrations for enterprise customers. In this role, you’ll take ownership of migrating legacy firewall environments to Palo Alto Strata NGFW, modernizing security policies, and strengthening customers’ overall security posture.

You’ll be a hands-on engineer focused on migration execution, policy optimization, and best‑practice implementation across physical and virtual Palo Alto firewalls. While exposure to Prisma Access is helpful, this position is centered on Strata firewall migrations and enterprise NGFW deployments.

Your Key Responsibilities Include:

Firewall Migration & Deployment

• Lead end‑to‑end migrations from legacy firewall platforms (ASA, Check Point, Fortinet, SonicWall, etc.) to Palo Alto Strata NGFW.
• Perform pre‑migration assessments, rule analysis, and configuration transformations using tools such as Expedition.
• Design and implement clean, optimized Palo Alto configurations including zones, routing, NAT, VPNs, HA, and security profiles.
• Execute cutovers, validate traffic flows, and provide post‑migration stabilization support.

Security Policy Optimization

• Analyze and rationalize existing firewall rulebases to eliminate redundancies, unused rules, and excessive access.
• Apply Zero Trust and least‑privilege principles using App‑ID, User‑ID, and identity‑based segmentation.
• Tune Threat Prevention, URL filtering, and WildFire to improve detection and reduce risk.
• Provide actionable recommendations to improve enterprise security posture.

Operations, Troubleshooting & Best Practices

• Troubleshoot complex network and security issues across Layers 3–7.
• Support firewall upgrades, best‑practice checks, and ongoing optimization initiatives.
• Develop and maintain deployment documentation, runbooks, and standardized Methods of Procedure (MOPs).

Collaboration & Technical Leadership

• Partner with customers, architects, and internal delivery teams to gather requirements and validate designs.
• Communicate technical plans, risks, and changes clearly to both technical and non‑technical stakeholders.
• Mentor junior engineers and contribute to shared knowledge and delivery standards.

Your Future at Kyndryl
As a Security Engineer at Kyndryl you will join the Kyndryl Consultant Profession, working with other Kyndryl Consultants, Architects, Project Managers, and cross-functional Technical Subject Matter Experts – presenting unlimited opportunities with unmatched support through our investment in your learning, training, and career growth

The compensation range for this position in the US is $138,480 to $263,160 based on a full-time schedule. Your actual compensation may vary depending on your geography, job-related skills, and experience. For part-time roles, the compensation will be adjusted appropriately. The pay or salary range will not be below any applicable state, city, or local minimum wage requirement.

This position will be eligible for Kyndryl's discretionary annual bonus program, based on performance and subject to the terms of Kyndryl's applicable plans. You may also receive a comprehensive benefits package which includes medical and dental coverage, disability, retirement benefits, paid leave and paid time off. Note: if this is a sales commission eligible role, you will be eligible to participate in a sales commission plan in lieu of the annual discretionary bonus program. Applications will be accepted on a rolling basis. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Kyndryl currently does not require employees to be fully vaccinated against COVID-19, however, if you are hired to work at a client, customer, or partner location, you may be required to show proof of vaccination to align with their respective COVID-19 vaccination policies. Those who believe they are eligible may apply for a medical or religious accommodation prior to the start of employment.

Who You Are

You’re good at what you do and possess the required experience to prove it. However, equally as important – you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused – someone who prioritizes customer success in their work. And finally, you’re open and borderless – naturally inclusive in how you work with others.

Required Skills & Experience

• 5+ years of experience in network and security engineering with strong hands‑on expertise in Palo Alto NGFW / Strata Firewalls.
• Proven experience performing firewall migrations and rulebase optimization in enterprise environments.
• Strong understanding of routing, NAT, VPNs, segmentation, and Layer 7 security controls.
• Hands‑on experience with Panorama, Expedition, and Palo Alto Best Practice Assessments.
• Solid understanding of Zero Trust concepts and modern security architectures.

Preferred Skills & Experience

• Exposure to Prisma Access, ZTNA, or cloud‑delivered security services.
• Experience integrating firewalls with AWS, Azure, or GCP environments.
• Certifications such as PCNSE, PCNSA, CISSP, CCSP, or CISM.
• Experience with automation or scripting (e.g., Python, Ansible).
• Bachelor’s degree or equivalent professional experience

Being You

Diversity is a whole lot more than what we look like or where we come from, it’s how we think and who we are. We welcome people of all cultures, backgrounds, and experiences. But we’re not doing it single-handily: Our Kyndryl Inclusion Networks are only one of many ways we create a workplace where all Kyndryls can find and provide support and advice. This dedication to welcoming everyone into our company means that Kyndryl gives you – and everyone next to you – the ability to bring your whole self to work, individually and collectively, and support the activation of our equitable culture. That’s the Kyndryl Way.

What You Can Expect

With state-of-the-art resources and Fortune 100 clients, every day is an opportunity to innovate, build new capabilities, new relationships, new processes, and new value. Kyndryl cares about your well-being and prides itself on offering benefits that give you choice, reflect the diversity of our employees and support you and your family through the moments that matter – wherever you are in your life journey. Our employee learning programs give you access to the best learning in the industry to receive certifications, including Microsoft, Google, Amazon, Skillsoft, and many more. Through our company-wide volunteering and giving platform, you can donate, start fundraisers, volunteer, and search over 2 million non-profit organizations. At Kyndryl, we invest heavily in you, we want you to succeed so that together, we will all succeed.

Get Referred!
If you know someone that works at Kyndryl, when asked ‘How Did You Hear About Us’ during the application process, select ‘Employee Referral’ and enter your contact's Kyndryl email address.