Principal Professional Services Consultant

Job Summary

We are seeking a highly strategic and technical Principal Consultant to lead the architecture, engineering, and deployment of enterprise-grade Next-Generation Firewall (NGFW) solutions. In this senior-level role, you will act as a trusted advisor to C-level executives and enterprise architects, guiding them through complex network security transformations and Zero Trust network designs. You will handle the most critical technical escalations, spearhead massive infrastructure migrations, and provide mentorship to a team of security engineers.

Key Responsibilities

Architecture Strategic Design

• Design comprehensive High-Level (HLD) and Low-Level (LLD) architectures for global firewall deployments across on-premises, hybrid, and multi-cloud environments (AWS, Azure, GCP).
• Lead technical workshops with enterprise clients to align business requirements with robust, scalable, and secure network architectures.
• Architect and standardize Zero Trust Network Access (ZTNA) frameworks, micro-segmentation strategies, and advanced threat protection models.

Implementation Advanced Migrations

• Oversee the end-to-end deployment of massive-scale NGFW clusters, Panorama management systems, and GlobalProtect infrastructure.
• Spearhead complex, multi-vendor firewall migrations (e.g., transitioning from Cisco ASA/Firepower, Check Point, or Fortinet to Palo Alto Networks) using advanced scripting and migration tools.
• Develop automated workflows for firewall provisioning, policy management, and log analysis utilizing Python, REST APIs, and Ansible.

Technical Escalation Team Leadership

• Serve as the ultimate escalation point for complex P1/P2 deployment issues, performing deep packet inspection and advanced routing (BGP, OSPF) troubleshooting.
• Mentor senior and junior consultants, establishing best practices, standard operating procedures (SOPs), and deployment templates.

Qualifications

• 12+ years of progressive experience in enterprise network security architecture and engineering.
• Expert-level knowledge of Palo Alto Networks NGFW, Panorama, App-ID, User-ID, SSL Decryption, and Threat Prevention configurations.
• Extensive experience with public cloud networking and securing multi-cloud perimeters.
• Strong proficiency in dynamic routing protocols, TCP/IP fundamentals, and packet-level analysis.
• PCNSE (Palo Alto Networks Certified Network Security Engineer) is required; PCNSC (Certified Network Security Consultant) or PCSAE is highly desired.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.