Job Description:
• Client is seeking an experienced SASE Implementation Engineer to lead the deployment and implementation of Palo Alto Networks Prisma Access.
• The resource will enhance secure remote connectivity and modernize the university's network security architecture.
• The candidate will be responsible for end-to-end implementation, including architecture support, configuration, integration, migration, testing, troubleshooting, production validation, and operational transition.
• This role requires strong hands-on network security engineering experience
Key Responsibilities:
• Lead the technical implementation of Palo Alto Networks Prisma Access, including architecture, configuration, integration, migration, and testing.
• Deploy, configure, administer, and troubleshoot Prisma Access through Strata Cloud Manager.
• Support mobile users, remote networks, service connections, and production validation.
• Configure and troubleshoot PAN-OS, Panorama, GlobalProtect, routing, VPN, authentication, security policies, logging, and monitoring.
• Design and validate high-availability and resilient network security solutions.
• Plan and execute migrations, integration testing, defect resolution, production readiness, cutover, and operational handoff.
• Automate configuration, validation, integration, and deployment tasks using APIs, PowerShell, Python, Ansible, Terraform, Git, or comparable tools.
• Manage implementation schedules, technical dependencies, risks, issues, change control, and stakeholder coordination.
• Coordinate with IT infrastructure, networking, cybersecurity, vendor teams, and stakeholders.
• Prepare architecture diagrams, configuration standards, migration procedures, test documentation, troubleshooting guides, and operational runbooks.
• Provide technical guidance, training, demonstrations, mentoring, and knowledge transfer to staff.
Required Skills and Qualifications:
• Demonstrated experience leading at least one completed production SASE or enterprise network security implementation.
• Hands-on experience with Palo Alto Networks Prisma Access and Strata Cloud Manager.
• Strong knowledge of PAN-OS, Panorama, and GlobalProtect.
• Experience with network security, routing, VPNs, authentication, security policies, logging, and monitoring.
• Knowledge of high-availability and resilient network architecture.
• Experience managing end-to-end implementation and migration lifecycles.
• Hands-on automation experience with APIs, PowerShell, Python, Ansible, Terraform, Git, or similar technologies.
• Ability to manage technical schedules, risks, dependencies, issues, and implementation status.
• Strong technical documentation, troubleshooting, communication, and stakeholder management skills.
• Experience with production validation, operational transition, and technical knowledge transfer.
Tools and Technologies:
• Palo Alto Networks Prisma Access, Strata Cloud Manager, Panorama, PAN-OS, GlobalProtect, Prisma Access ADEM, routing and VPN diagnostic tools, Wireshark, Splunk or Microsoft Sentinel, ServiceNow, Microsoft Project, Visio, PowerShell, Python, Ansible, Terraform, and Git.
Preferred Certifications:
• Current Palo Alto Networks, networking, cybersecurity, or project management certifications are beneficial. Certifications are evaluated as part of the candidate assessment; they are not mandatory for pass/fail eligibility unless required by the final contract title.
Additional Requirements
• Candidates must provide evidence of relevant production implementation experience, including the platform, scope, responsibilities, outcome, and client or employer reference.
• Project documentation or technical artifacts demonstrating Prisma Access implementation, network security engineering, automation, and deployment lifecycle ownership may be required.
• Compliance with security, confidentiality, identity, access, and data-handling requirements is mandatory.
• Background screening and access approvals may be required.
• Travel to client’s locations may be required when directed and approved.
