CCS Global Tech is a rapidly growing Information Technology company with a diverse portfolio of technology products and services and a large network of industry partnerships. With over 22 years of being a successful business with a global talent pool and presence, CCS is a certified Microsoft Gold Partner and specializes in delivering expert Microsoft based solutions for technical and business needs. We have been recognized by Inc. 500 Magazine as one of the fastest growing small companies in the Unites States.
we are a Tier 1 vendor for the City and County of San Francisco for Cloud Services, Staffing Services and Training Services. For this multi-year opportunity with a diverse set of needs to address, we are currently focusing on establishing partnerships with individuals as well as companies who can help us enhance our overall service portfolio, cut lead times, and ultimately help us deliver successfully. We currently hold sizable Government accounts in the San Francisco bay area including City and County of San Francisco, San Mateo County, and Santa Clara County.
We take great pride in our global reach and local influence. Your experience alongside our highly skilled and talented internal team who guide you along the way, offers key insights into what helps you stand out in a competitive job market.
If you are a partner company, please submit resumes with contact information of your own W2 Consultants only. Submitted consultants are expected to have excellent communication skills.
Project Scope:
Task 1: Assessment
- Conduct a comprehensive assessment of existing and proposed Palo Alto Networks architecture and NextGen firewall configurations.
- Assess the Next-Generation Internet Edge design and provide recommendations based on industry and Palo Alto Networks' best practices.
- Validate hardware, software, and infrastructure readiness for deployment.
- Review Panorama and firewall baseline configurations, including interfaces, zones, routing, and system settings.
- Verify platform requirements, dependencies, and high-availability design considerations.
- Evaluate firewall architecture, security policies, security profiles, and operational processes.
- Assess Advanced Threat Prevention (ATP) and related security profiles configurations.
- Identify configuration gaps, risks, and opportunities for improvement.
- Provide written findings, recommendations, and remediation guidance.
Task 1 Deliverables:
- Environment Review and Readiness Assessment
- Design Review Findings and Recommendations Report
- Firewall Assessment Report
- Security Architecture Review and Recommendations Report
- Gap Analysis and Risk Assessment Report
2. Task 2: Migration
- Participate in project meetings and recurring project status meetings.
- Develop migration and implementation strategies for the NextGen firewall environment.
- Clean up existing configurations prior to migration.
- Configure Palo Alto Networks firewalls, Panorama, security services, and related components.
- Migrate existing firewall configurations and policies to the NextGen environment.
- Modify and/or implement security zones, network segmentation, rules, profiles, and services as required.
- Configure high-availability features and perform failover validation.
- Develop and execute validation and testing procedures, including end-to-end functional, operational, failover, performance, and connectivity testing.
- Support deployment and activation of the NextGen firewall infrastructure and planned migration activities, including after-hours cutovers when required.
- Identify, troubleshoot, and remediate implementation and migration issues.
- Verify successful migration and operational readiness following implementation.
- Support organizational change management processes and required implementation documentation.
- Track and communicate risks, issues, and dependencies throughout migration activities.
Task 2 Deliverables:
- Migration Strategy and Implementation Plan
- Migration Execution Plan
- Updated NextGen Firewall and Panorama Configurations
- Configuration and Implementation Documentations
- Security Policy and Rule-base Documentation
- High-Availability Configuration and Validation Documentation
- Test Plan
- Test Results and Validation Report
- Migration Completion Report
- Issue Resolution and Remediation Log
- Change Management Documentation
- Weekly Status Reports
- Risk, Issue, and Mitigation Log 3.
Task 3: Best Practices
- Implement Palo Alto Networks security best practices and recommended design improvements, including security policy, security profile, and threat prevention optimization.
- Design and configure centralized monitoring and reporting using native Palo Alto Networks capabilities (e.g., Panorama and, where licensed, Strata Cloud Manager and Strata Logging Service). No new third-party monitoring tool will be introduced under this scope.
- Configure operational dashboards, alerts, notifications, and reporting mechanisms within the Palo Alto Networks platform.
- Configure weekly and monthly operational and security reports.
- Configure historical trending and performance analysis capabilities.
- Provide recommendations for consolidating security visibility and reporting across the Palo Alto Networks environment.
- Provide technical guidance, troubleshooting assistance, and design consultation throughout the project.
- Participate in remediation planning for identified security risks and assessment findings.
- Address issues, dependencies, risks, and technical challenges directly related to the Palo Alto Networks environment.
- Provide recommendations for improving operational effectiveness, security posture, and system performance.
- Add troubleshooting issues and resolution. Ability to submit tickets and escalate to PAN.
Task 3 Deliverables:
-
- Monitoring and Reporting Design Document
- Configured Dashboards and Alerting Framework
- Weekly and Monthly Security Report Templates
- Operational Metrics and Trending Reports
- Technical Advistory Documents (as-needed)
- Security Remediation Recommendations
4. Task 4: Knowledge Transfer
-
- Develop and maintain project documentation throughout the engagement.
- Deliver as-built documentation reflecting the final implemented solution and configurations.
- Document recommended operational procedures and best practices, including use of native Palo Alto Networks monitoring and reporting capabilities.
- Conduct knowledge transfer sessions for designated staff.
Task 4 Deliverables:
-
- As-Built Documentation (including as-built configurations)
- Standard Oeprating Procedures (SOPs)
- Knowledge Transfer Materials and Presentation Content
- Knowledge Transfer Session Summary
- Final Project Summary Report
Roles/Responsibilities:
1. Palo Alto Networks Security Platform Assessment
- Demonstrated expertise to assess and validate current-state and future-state Palo Alto Networks security architectures, including firewall platforms, Panorama, security policies, security profiles, and threat-prevention capabilities.
- Experience reviewing and evaluating security configurations-such as Advanced Threat Prevention (ATP), policies, profiles, and architecture-against industry standards and Palo Alto Networks best practices.
- Proven capacity to identify configuration gaps, risks, and deviations from best practices, and to provide documented, prioritized, and actionable recommendations for remediation and design improvement.
2. Next-Generation Firewall Migration and Deployment
-
-
- Proven experience planning, preparing, and executing Palo Alto Networks Next-Generation Firewall migrations, including configuration cleanup, validation, deployment, and cutover support.
- Demonstrated capability to develop migration strategies, implementation plans, and comprehensive testing procedures, including functional, failover, performance, and high-availability testing.
- Proven capacity to ensure operational readiness through issue identification, troubleshooting, remediation, documentation, and coordination of risks, dependencies, project communications, and change-management activities.
3. Implementation of Palo Alto Networks Best Practices
-
-
- Experience aligning Palo Alto Networks environments with vendor and industry best practices, including optimization of security policies, security profiles, and threat-prevention configurations.
- Demonstrated proficiency in designing and configuring centralized monitoring, alerting, dashboards, and reporting using native Palo Alto Networks tools such as Panorama and, where applicable, Strata Cloud Manager and Strata Logging Service.
- Demonstrated capability to provide technical advisory services, analyze and resolve platform issues, and deliver actionable recommendations to improve operational visibility, security posture, and system stability.
4. Documentation and Knowledge Transfer
-
-
- Demonstrated proficiency in producing comprehensive as-built documentation, operational procedures, and best-practice guidance for ongoing maintenance and administration of the Palo Alto Networks environment.
- Experience delivering structured knowledge-transfer sessions, ensuring designated staff are trained on configurations, operational processes, monitoring, and reporting capabilities.
- Demonstrated capability to provide clear, complete, and maintainable documentation supporting long-term operational readiness
Mandatory Skills/Requirements:
- The Proposed candidate must possess a minimum of ten (10) years of expert-level experience* with Palo Alto Networks technologies in large-scale enterprise environments**.
- Experience must include the design, assessment, implementation, configuration, migration and operational support of Palo Alto Networks Next-Generation Firewalls (NGFW) and Panorama security management solutions. The proposed candidate must demonstrate hands-on experience with high-availability configurations, security policy management, and ongoing operational support in complex enterprise environments.
- Experience with Palo Alto Networks PA-7500, PA-5450, PA-3000 series or equivalent platforms required
- Expert Level Experience: Hands-on Architecture & Deployment- Manages complex Palo Alto Next-Gen Firewalls (NGFW), Panorama centralized management, Prims/SD-WAN, and Prisma Access. SASE deployments. High-traffic environments, FWs with more than 10G throughput. High availability (HA) deployments for fail-over. Multi-Zone 1000+ policies.
- Large-scale enterprise environment: Campus-wide multi-building and location; minimum 5 physical locations. 20,000+ users
- The Candidate must possess a minimum of ten (10) years of experience conducting comprehensive cybersecurity assessments of enterprise network and security infrastructures. Experience must include firewall architecture and configuration reviews, security policy evaluations, threat-prevention effectiveness assessments, and the identification and analysis of security gaps, vulnerabilities, and risks. The Candidate must demonstrate experience in evaluating existing security controls, identify deficiencies, assess associated risks, and develop recommendations to strengthen the organization's security posture.
- The Candidate must demonstrate proven experience planning and executing large-scale firewall migrations involving a minimum of five (5) pairs (total of 10) of firewalls within a single migration program or project. Experience must include configuration assessment and cleanup, security policy translation and implementation, failover testing, end-to-end validation, troubleshooting, and production cutovers. The Candidate must also demonstrate hands on experience supporting project governance activities, including status reporting, change-management coordination, and implementation planning in large or complex enterprise environments.
- The Candidate must possess a minimum of ten (10) years of experience aligning Palo Alto Networks environments with vendor-recommended and industry-recognized security and operational best practices. Experience must include implementing and maintaining centralized monitoring, alerting, dashboards, operational reporting, and trending analysis using native Palo Alto Networks capabilities, including Panorama and associated logging and management tools. Experience must also include evaluating existing configurations and operational practices, identifying security and performance gaps, providing technical advisory services, and recommending remediation measures to improve security posture, operational efficiency, and compliance with applicable best practices. Monitoring, reporting, and management experience must be demonstrated through native Palo Alto Networks capabilities and associated tools, rather than third-party monitoring platforms
- The Candidate must possess a minimum of ten (10) years of experience developing and maintaining technical documentation, operational procedures, and as-built deliverables for enterprise network and security environments. Experience must include documenting system architectures, configurations, implementation details, operational processes, and troubleshooting procedures, as applicable. The Candidate must also demonstrate experience conducting knowledge transfer and delivering technical training to network engineering and operations teams to support effective system administration, ongoing operations, troubleshooting, and knowledge retention.
- The Candidate must possess a minimum of three (3) years of experience working with advanced Palo Alto Networks security services and solutions, including Advanced Threat Prevention (ATP), Prisma Access, Prisma Cloud, and associated security management and reporting capabilities. Experience must include implementing, configuring, assessing, managing, or supporting these technologies to enhance threat prevention, secure network access, cloud security posture, and centralized security visibility, as applicable to the solutions deployed.
Desirable Skills: N/A
