Migration Factory Engineer

Role: Migration Factory Engineer

Location & Work mode: India & Remote

Shift: Open shift (should be flexible)

Job Description:

The Migration Factory Engineer will be responsible for executing large-scale, standardized firewall migration engagements. This role focuses on high-volume, tool-driven migration activities, ensuring seamless transition of customer security policies and configurations from legacy firewall platforms to Palo Alto Networks solutions.

The engineer will work in a structured, SLA-driven environment, leveraging migration tools, predefined runbooks, and best practices to ensure consistent, high-quality delivery. While collaborating with architects and senior engineers, this role is primarily execution-focused, requiring strong technical expertise in firewall technologies, networking fundamentals, and policy validation.

The ideal candidate thrives in a process-oriented environment, demonstrates strong troubleshooting capabilities, and can operate effectively during migration cutovers and high-pressure production windows.

Key Responsibilities

Migration Execution & Delivery

• Execute firewall migrations from legacy vendors (Cisco, Check Point, Fortinet, Juniper, etc.) to Palo Alto Networks platforms.
• Utilize migration and policy conversion tools (e.g., Expedition and related automation tools).
• Translate, validate, and optimize security policies for Palo Alto Networks firewalls.
• Perform configuration migration, rule conversion, NAT translation, VPN migration, and object cleanup.
• Execute migration waves following defined runbooks and SOPs.

Pre & Post Migration Validation

• Conduct pre-migration assessments and configuration audits.
• Perform policy validation and traffic flow analysis.
• Execute post-migration verification and functional testing.
• Support rollback planning and execution if required.
• Ensure minimal downtime and business impact during cutover windows.

Troubleshooting & Issue Resolution

• Perform fault isolation and root cause analysis during migration activities.
• Resolve routing, VPN, NAT, and connectivity issues.
• Support high-severity or time-sensitive cutover events.
• Escalate complex architectural concerns to senior architects when necessary.

Documentation & Reporting

• Maintain accurate migration documentation.
• Update migration trackers, wave plans, and configuration logs.
• Contribute to knowledge base documentation and technical bulletins.
• Ensure compliance with defined SLA and quality standards.

Collaboration & Communication

• Collaborate with Migration Architects, Project Managers, and Customer Success teams.
• Communicate migration progress and technical findings clearly to stakeholders.
• Participate in technical discussions across cross-functional teams.
• Support junior engineers and contribute to a positive technical learning environment.

Required Experience

• 4 to 7 years of hands-on experience in firewall implementation and migration projects.
• Experience migrating configurations from legacy firewall platforms to Palo Alto Networks.
• Prior hands-on experience supporting Palo Alto Networks products (mandatory).
• Experience working in SLA-driven or large-scale deployment environments preferred.
• Exposure to structured delivery models or migration factory environments is a plus.

Certifications

• PCNSE Mandatory
• CCNP / equivalent networking certification preferred
• Additional Palo Alto certifications are a plus

Required Skills & Attributes

• Strong analytical and troubleshooting skills.
• Ability to follow structured processes and defined runbooks.
• Detail-oriented with high accuracy in policy validation.
• Comfortable working during migration windows (including off-hours if required).
• Ability to work independently and in a collaborative team environment.
• Strong written and verbal communication skills.
• Self-motivated with the ability to manage multiple migration waves simultaneously.

Education

• Bachelor’s degree in Computer Science, Engineering, or related technical discipline.