11/11/2026 updated
100 % available
Senior Network Security Engineer | Palo Alto | Automation & Digital Product Engineering
Stefanestii de Jos, Romania
Only remote
Bachelor's Degree - Spiru Haret University (2008-2011)About me
Network security engineer with 10+ years in networking and security, ~8 years on Palo Alto (Panorama, Prisma Access, GlobalProtect, VPN, BGP). I also build secure web products, automations and AI-assisted workflows for small teams. More: alexnicoara.com
SupabaseGitHubPython (Programming Language)Next.jsTypeScriptReact.jsStripePalo Alto NetworksRestful ApiSplunkServicenow
Palo Alto Networks & Firewall Engineering
Expertise in Palo Alto NGFW, PAN-OS, Panorama, Prisma Access, GlobalProtect, App-ID, User-ID, NAT, Security Policy, Threat Prevention, URL Filtering, WildFire and Network Segmentation. Management and troubleshooting of large-scale estates with 150+ Palo Alto firewalls across on-premises and cloud infrastructure.
Network Security & Cloud Connectivity
Deep knowledge of BGP, Policy-Based Forwarding, TCP/IP, IP/MPLS, Azure Networking, Hybrid Cloud, Cisco SD-WAN / Viptela, Cisco, Juniper and Huawei. Hands-on experience with routing, PBF, NAT, Azure networking, load-balancing and application-path dependencies.
Security Operations & Incident Management
Proficiency with Tufin, ServiceNow workflows, Splunk, QRadar, IDS/IPS, traffic-flow analysis, incident troubleshooting, root-cause analysis and firewall lifecycle management. Experience with event correlation, malware and threat investigation, and customer escalation handling.
Automation & Scripting
Foundational knowledge in Python, including reading and modifying existing scripts. Working experience with REST APIs, JSON, Git/GitHub, Linux CLI and scripting-assisted operational workflows.
Digital Product Engineering
Hands-on development with Next.js, React, TypeScript, Supabase, Vercel, Stripe, CI/CD, GitHub Actions and secure application deployment. Building production software using modern web technologies and AI-assisted engineering.
IP/MPLS & WAN Monitoring
Monitoring of large IP/MPLS, MAN/WAN, DWDM, SDH and mobile-network environments. Investigation of backbone incidents, BGP sessions, peering and network availability with L1/L2 support for IP/MPLS infrastructure.
Security Tooling & SIEM
Practical experience with Splunk, QRadar, FireEye, Bluecoat, McAfee, Cybereason and related security tooling for security event investigation and threat analysis.
Application Security Controls
Implementation of practical security controls including server-side validation, anti-bot protection, WAF, Content Security Policy, dependency scanning, CodeQL, DNSSEC and email-domain authentication.
Experience
Professional experience10+ years
Freelancer since2026
Languages
EnglishFluentFrenchBasic knowledgeRomanianNative speaker
Project history
Building and deploying production-oriented applications from requirements and architecture through implementation, security review and production support. Working with Next.js, React, TypeScript, Supabase, APIs, Git/GitHub, Vercel and AI-assisted development workflows. Implementing practical security controls including server-side validation, anti-bot protection, WAF, Content Security Policy, dependency scanning, CodeQL, DNSSEC and email-domain authentication.
Selected projects: Swim4Dreams event platform (72ore-swim4dreams.ro), MarilenaFitCoach coaching platform (marilenafitcoach.com), Cerebro Spinal clinic website (clinica-cerebro-spinal.ro), a Google Forms + Sheets + Apps Script survey and reporting workflow for an NGO event (delivered in phases, with a separate test environment using fictitious data only), and MarPT, a web app for personal trainers to manage clients, sessions and progress (currently in beta testing with a working trainer).
Operating and troubleshooting enterprise-scale Palo Alto Networks NGFW environments supporting global infrastructure. Designing, implementing and maintaining security policies using App-ID, User-ID, security profiles and network segmentation. Working extensively with Panorama, Prisma Access, GlobalProtect, NAT, routing, VPN and complex traffic-flow troubleshooting. Performing firewall rule lifecycle management, reviews, optimization, production changes and operational hardening. Working with Tufin and ServiceNow-driven enterprise security and change workflows, including large-scale firewall lifecycle and decommissioning initiatives.
Designed and built a bilingual production event platform covering race registration, cart and checkout, Stripe payments and webhooks, participant management, capacity controls, validation workflows, results and administrative operations. Built with Next.js, React, TypeScript, Supabase, Stripe and Vercel, with production security hardening, CI/CD, dependency monitoring and operational controls.