Responsibilities

• Designing, deploying, and managing Palo Alto Networks Next-Generation Firewalls (NGFW) across on-premises and cloud environments, including Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP)
• Implementing and optimizing Prisma Access capabilities, including GlobalProtect, Prisma Agent, and Prisma Browser, to support secure internet access and remote access use cases
• Administering Panorama and Strata Cloud Manager to support centralized policy management, device configuration, visibility, and operational consistency across enterprise environments
• Configuring and tuning security capabilities including Threat Prevention, intrusion prevention system/intrusion detection system (IPS/IDS), Anti-Spyware, Antivirus, WildFire, Domain Name System (DNS) Security, and Secure Sockets Layer/Transport Layer Security (SSL/TLS) decryption policies
• Developing client solution designs and recommendations, integrating Palo Alto platforms with security information and event management/security orchestration, automation, and response (SIEM/SOAR) and identity provider tools, and supporting automation through Terraform, Ansible, or Python

Requirements

• BA/BS degree in a technical field (e.g., Computer Science, Cyber Security, Information Technology, or equivalent work experience)
• Palo Alto Networks Certified Network Security Professional certification
• 5+ years of progressively responsible experience in network security engineering, with demonstrated depth in Palo Alto Networks technologies and increasing levels of technical ownership and leadership over time
• 5+ years of hands-on experience designing, deploying, and managing Palo Alto Networks Next-Generation Firewalls (NGFW) in both on-premises and cloud environments (AWS, Azure, and/or GCP)
• 3+ years of experience designing, deploying, and managing Prisma Access, including configuration of GlobalProtect, Prisma Agent, and Prisma Browser for Internet and secure remote access use cases.
• 3+ years of experience designing, deploying, and managing Panorama centralized management, and Strata Cloud Manager
• 3+ years of experience configuring and tuning Palo Alto Threat Prevention features, including IPS/IDS, Anti-Spyware, Antivirus, WildFire, and DNS Security
• 3+ years of experience implementing and troubleshooting SSL/TLS Decryption policies, including forward proxy and inbound inspection, certificate management, and decryption exclusion handling
• 3+ years of hands-on experience defining, managing, and reviewing security policies, including rule base optimization, policy lifecycle management, and periodic access reviews
• 3+ years of experience with one or more major cloud service providers (AWS, GCP, Azure) and their native security toolsets, including deployment of VM-Series firewalls within cloud-native architectures

Preferred

• Advanced cybersecurity certifications such as CISSP, CCIE Security, CCNP Security, or GIAC equivalents (e.g., GPEN, GCSA)
• Experience with automation tooling (e.g., Terraform, Ansible, Python) for provisioning, policy management, and configuration-as-code workflows
• Experience integrating Palo Alto Firewalls and Prisma with SIEM/SOAR platforms (e.g., Splunk, Microsoft Sentinel, Palo Alto XSOAR) via log streaming, API connectors, or syslog for threat detection and incident response workflows
• Experience designing and presenting Palo Alto network solution architectures (ideally tailored to client requirements, translating technical concepts for executive and non-technical stakeholders)
• Demonstrated experience working in large, complex enterprise environments with stringent security, compliance, and availability requirements
• Familiarity with identity provider integrations (e.g., Okta, Azure AD, Ping Identity) for SAML/SCIM-based authentication within Palo Alto Cloud Identity Engine (CIE)
• Ability to conduct SASE vendor competitive analysis and advise clients on solution selection based on specific use cases and requirements (e.g., Zscaler vs. Palo Alto Prisma vs. Netskope)
• Ability to conduct Zero Trust Architecture assessments and develop roadmaps aligning Zscaler capabilities to NIST SP 800-207 or CISA Zero Trust Maturity Model frameworks
• Previous consulting or "Big 4" experience, with a track record of delivering enterprise network security or SASE transformation engagements