Join UCT and be part of the fastest-growing sector in the world! We indirectly touch every semiconductor chip that goes into every smartphone, smart car and device that uses artificial intelligence. This is a critical time for the semiconductor industry and for UCT - as technology evolves, we evolve with it. UCT is a diverse workplace where every talented employee is committed to continuous innovation, challenging the status quo and exceeding customer expectations. If you are a person with a relentless drive to succeed, a strong focus on quality with a passion for success - join us today!

UCT is looking for a talented Engineer III, IT Infra to join us in Penang, Malaysia!

Job Summary

The Senior Network Firewall Engineer plays a critical role in securing and enabling global enterprise connectivity across hybrid and multi-cloud environments, including AWS and Microsoft Azure. This position is responsible for the architecture, implementation, governance, and operational excellence of network security platforms supporting a highly distributed, 24x7 global business.

This role serves as a senior technical authority for next-generation firewall services, cloud network security controls, and segmentation strategies across data centers, regional hubs, cloud landing zones, and remote access environments. A strong emphasis is placed on standardization, scalability, and visibility through centralized management platforms.

The position requires deep hands-on expertise with Palo Alto Networks firewalls and Palo Alto Networks Panorama, including large-scale policy management, GlobalProtect remote access architecture, advanced threat prevention, and global firewall lifecycle management. The engineer will drive consistency and security posture improvements across multi-region environments through centralized governance and automation.

Key Responsibilities

Global Firewall & Network Security Architecture

Architect, design, and operate enterprise-scale firewall solutions across on-premises data centers and multi-cloud environments (AWS and Azure)
Lead global firewall strategy for hybrid connectivity, including cloud landing zones, shared services, and inter-region connectivity
Design and enforce network segmentation, zero trust principles, and least privilege access models at global scale
Architect and manage Palo Alto Networks Panorama for centralized policy management, device group hierarchy, and template-based configuration standardization
Design and implement scalable GlobalProtect VPN architectures, including multi-portal and multi-gateway deployments, HIP-based policy enforcement, and certificate-based authentication
Develop standardized firewall design patterns leveraging security zones, virtual routers, NAT policies, and policy-based forwarding (PBF)
Lead migration and consolidation of distributed firewall environments into centralized Panorama-managed platforms

Cloud Security (AWS & Azure)

Implement and manage cloud-native and virtual firewall solutions within AWS and Azure environments
Partner with Cloud Platform teams to integrate network security services into cloud adoption frameworks and landing zones
Secure site-to-site, inter-VPC/VNet, and hybrid connectivity (VPN, ExpressRoute, Direct Connect)
Extend enterprise firewall policies and segmentation strategies consistently into cloud environments
Support automated, policy-driven firewall deployments using infrastructure-as-code and CI/CD pipelines

Operations, Reliability & Incident Management

Provide Tier 3 / Tier 4 operational support for firewall and perimeter security services across global environments
Lead troubleshooting and root cause analysis of complex, multi-region network security incidents
Perform advanced diagnostics using packet capture, session flow analysis, and traffic logging within Palo Alto platforms
Troubleshoot and resolve issues involving NAT, VPN (IPsec and GlobalProtect), routing (BGP/OSPF), asymmetric traffic, and application-layer behavior
Leverage Panorama for centralized visibility, log aggregation, and rapid incident response
Ensure firewall platforms meet enterprise SLAs for availability, resiliency, and performance
Participate in a global on-call rotation supporting 24x7 business operations

Governance, Risk & Compliance

Ensure firewall policies and network security controls align with global security standards and regulatory requirements (PCI DSS, SOX, ISO 27001, NIST)
Enforce standardized security policies globally using Panorama device groups and templates
Drive policy lifecycle management, including rule optimization, cleanup, and audit readiness
Leverage advanced firewall capabilities such as App-ID, User-ID, and Content-ID to enforce identity-aware, application-based security controls
Support internal and external audits, risk assessments, and compliance initiatives
Partner with Information Security, Risk, and Compliance teams to continuously improve the enterprise security posture

Automation, Tooling & Continuous Improvement

Improve firewall operations through automation, standardization, and platform optimization
Automate firewall provisioning and policy management using Panorama APIs, scripting, and infrastructure-as-code tools (Python, Terraform, ARM/Bicep)
Integrate firewall configurations into CI/CD pipelines to reduce manual effort and configuration drift
Develop reporting and analytics leveraging Panorama logs and external platforms such as SIEM tools
Evaluate emerging network security technologies and recommend enterprise adoption strategies

Leadership & Collaboration

Act as a senior technical mentor and escalation point for regional network and security engineering teams
Lead large-scale firewall lifecycle initiatives, including global hardware refresh programs, pre-staging, and coordinated multi-site deployments
Collaborate with Cloud Engineering, Security Operations, Infrastructure, and Application teams
Influence architectural decisions through design reviews and technical governance forums
Operate effectively in environments with varying levels of local technical support, executing remote deployments and migrations where required

Required Qualifications

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent experience
8+ years of enterprise network engineering experience with a strong focus on firewall and network security
Deep hands-on experience with Palo Alto Networks firewalls and Palo Alto Networks Panorama in large-scale, globally distributed environments
Strong knowledge of TCP/IP, routing, switching, VPNs, segmentation, and traffic inspection at scale
Proven experience supporting hybrid and multi-cloud enterprise networks

Preferred Qualifications

Experience designing and operating GlobalProtect VPN solutions, including HIP profiles and zero trust network access (ZTNA) approaches
Strong expertise in Palo Alto advanced features including App-ID, User-ID, Content-ID, SSL decryption, and threat prevention services
Experience operating within multinational, multi-region enterprise environments
Industry certifications such as PCNSE, CCNP Security, CCSE, CISSP, or equivalent
Experience with infrastructure-as-code and network security automation
Background in regulated or high-compliance industries

Working Environment

Global enterprise environment supporting multiple regions and time zones
Hybrid or remote work model depending on role and geography
Participation in global operational calls and scheduled maintenance windows as required

At Ultra Clean Technology, we do not just welcome diversity - we celebrate it! Ultra Clean Technology is proud to be an equal opportunity employer. We are committed to equal employment opportunity regardless of race, color, national or ethnic origin, age, religion, disability, sexual orientation, gender, gender identity and expression, marital status, and any other characteristic protected under laws and regulations.

Network Engineer Firewall Admin