Network Security Consultant - Palo Alto SSL Decryption (Outside IR35) at Plug, London, £Contract Rate

Contract Type: Outside IR35

Location: Remote (UK-based)

Duration: 6 Months

Overview
We are looking for a Network Security Consultant with strong Palo Alto Networks expertise to deliver a complex SSL decryption deployment across a multi-cluster firewall environment. The consultant will play a lead role in designing, configuring, and rolling out secure outbound SSL decryption for a large enterprise network, ensuring performance, policy integrity, and compliance with internal security standards.

Key Responsibilities

• Deliver an end-to-end SSL Outbound Decryption implementation across several HA firewall clusters
• Design and configure decryption profiles, certificates, and related security rules within existing network infrastructure
• Collaborate with customer engineering teams to plan and execute production cutovers and post-deployment validation
• Create and maintain documentation including configuration details, deployment runbooks, and validation reports
  
• Provide troubleshooting and escalation support during go-live activities
• Conduct structured knowledge transfer sessions to enable internal operational ownership
• Work within established governance, change control, and security frameworks

Essential Skills & Experience

• Strong hands-on experience with Palo Alto Networks NGFWs and Panorama
• Proven background in SSL/TLS decryption, certificate lifecycle management, and policy design
• Deep understanding of HA architectures, User-ID, and URL Filtering integrations
• Capable of managing customer stakeholders and technical leads in enterprise environments
• Self-sufficient contractor able to operate effectively under Outside IR35 conditions

Desirable

• PCNSE or equivalent Palo Alto certification
• Prior consulting or professional services delivery experience
• Familiarity with large-scale security infrastructure projects