Principal Professional Services Consultant - SASE & Prisma Access

Key Responsibilities

Architecture Strategic Consulting

• Lead the high-level and low-level design (HLD/LLD) of large-scale, global SASE architectures using Palo Alto Networks Prisma Access/ SASE Platform
• Serve as the primary technical authority and trusted advisor for enterprise clients, guiding C-level executives and network architects through Zero Trust Network Access (ZTNA) transformations.
• Conduct comprehensive capability assessments, scoping workshops, and whiteboard sessions to align business requirements with secure, scalable technical solutions.
• Design robust traffic steering, routing, and high-availability frameworks for complex hybrid-cloud and multi-cloud environments.

Implementation Deployment Leadership

• Oversee and execute the end-to-end deployment of Prisma Access, including Cloud Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), and Firewall as a Service (FWaaS).
• Integrate SASE solutions with enterprise Identity Providers (IdP) such as Okta, Azure AD, or Ping Identity using SAML/SSO for seamless user authentication.
• Manage complex migrations from legacy VPNs and on-premises proxy solutions to cloud-native Prisma Access environments.

Technical Escalation Team Mentorship

• Act as the highest point of technical escalation for complex troubleshooting involving routing (BGP, OSPF), IPsec/SSL VPN tunnels, and performance degradation.
• Mentor and provide technical guidance to senior and junior consultants, fostering a culture of continuous learning and technical excellence.
• Develop, standardize, and maintain deployment templates, best practice documentation, and automation scripts to streamline future service deliveries.

Architecture Strategic Consulting

Implementation Deployment Leadership

Technical Escalation Team Mentorship

Qualifications

• 12+ years of progressive experience in enterprise networking and network security.
• 4+ years of dedicated, hands-on experience designing and implementing Palo Alto Networks Prisma Access/ SASE Platform and Prisma SD-WAN solutions.
• Deep understanding of routing protocols (particularly BGP) and enterprise WAN architectures.
• Strong proficiency in Panorama and Strata Cloud Manager (SCM) for centralized SASE policy and device management.
• Extensive experience with IPsec, SSL/TLS decryption, GlobalProtect, and public cloud networking (AWS, Azure, or GCP).
• Exceptional communication and presentation skills, with the proven ability to articulate complex technical concepts to both technical and non-technical stakeholders.

Preferred Qualifications

• SASE Certifications, industry relevant
• Advanced Palo Alto Networks certifications: PCNSE (Palo Alto Networks Certified Network Security Engineer), PCSAE (Palo Alto Networks Certified Security Automation Engineer), or PMSE (Prisma SASE Micro-Credential).
• Experience utilizing infrastructure-as-code (IaC) and automation tools like Terraform

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.