Professional Services Consultant - SD-WAN Security

As a Professional Services Consultant (SASE), you'll get into the details of our platform. You will push the buttons, flip the levers, turn the knobs. You do not shy away from difficult challenges as it relates to cybersecurity, implementations, and integrations. You are the technical authority and will interact directly with our customers to help them secure their digital environments. The customers are counting on you to perform this work and train their staff. And while experience on the company's platform is desired, even more important is having a solid foundation in networking and security technologies combined with excellent communication skills.

In fact, extensive experience with a competitor's technology can play to your advantage. Many of the opportunities involve a client migrating to our platform for the first time, so understanding the nuances of that technology will enable you to be a better Palo Alto Networks consultant. And don't worry, we will send you to our Professional Services Academy to prepare you for the role, so you are experienced with our suite of services and products before you first meet the customer.

Your Impact

As a Principal Professional Services Consultant (SASE) at Palo Alto Networks, you will serve as the highest-level technical authority and strategic driver for our Secure Access Service Edge (SASE) solutions, including Prisma Access and SDWAN. You will be instrumental in leading technical initiatives, mentoring engineering teams, ensuring successful customer outcomes, and supporting the evolution of our next-generation security services.

Solution Implementation & Deployment

• Provide technical leadership in migrating customers from legacy remote access solutions to Palo Alto Networks SASE platforms.
• Identify, design, and implement solutions to improve performance, reliability, and security of Prisma Access and Prisma SD-WAN deployments.
• Build custom security policies and application signatures tailored to individual client needs.

Operational Support & Issue Resolution

• Troubleshoot and resolve complex SASE-related issues, including advanced security, networking, and cloud architecture problems.
• Provide after hours and weekend on-call support, as needed, to support maintenance activities.
• Work with our Technical Assistance Center to troubleshoot and diagnose support cases.

Technical Leadership & Service Excellence

• Provide technical oversight, direction and expertise for all SASE projects.
• Establish and promote Palo Alto Networks engineering best practices across deployments and engagements.
• Drive customer satisfaction through adoption and by partnering closely with Project Management and other teams.
• Ensure the highest levels of client satisfaction by delivering consistent, high-quality technical results setting the standard.

• 8+ years of industry hands-on experience with deep expertise in network security, cloud infrastructure, and related technologies
• Proven experience in deploying, and optimizing Palo Alto Networks SASE platforms, with technical knowledge of Prisma Access, Prisma SD-WAN, Prisma Browser, GlobalProtect, and Next-Generation Firewalls (NGFW)
• Hands-on experience with remote user access technologies, including IPSec VPN, SSL VPN, Explicit Proxy, tunneling and encryption protocols such as SSL/TLS, IPSec, and GRE, with strong familiarity with PKI and certificate management (public/private).
• Experience with authentication methodologies (2FA, SAML, RADIUS, LDAP, TACACS, Certificates) and directory services including Okta, Active Directory, Azure ADFS, Ping, Entra ID, and OneLogin
• Strong routing expertise, including BGP and OSPF, static routing, traffic steering, redistribution, and policy-based forwarding (PBF) in enterprise network environments
• Hands on experience of NGFW capabilities, configuration, and deployment, including Panorama, App-ID, User-ID, Threat Prevention, URL Filtering, SSL Decryption, CASB, DLP, IP, NAT, routing protocols, IPSec VPNs, and how these elements interact with end-user applications and cloud services
• Exceptional written and verbal communication skills, with the ability to clearly articulate technical concepts to leadership, technical peers, and non-technical stakeholders
• Comfortable working both independently and as part of cross-functional teams, with the ability to manage multiple complex projects under pressure with direct customer-facing consulting experience, with a strong track record of delivering high-impact outcomes and executive-level presentation
• Relevant certifications such as PCNSE/PCNSC, CCNP (or equivalent JNCIP-ENT/CCIE/CCDE), CISSP, or CCIE/JNCIE
• Must be able to travel up to 15% of the time

The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/com-missioned roles) is expected to be the annual range listed below. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found here (https://benefits.paloaltonetworks.com/) .

$140,000.00 - $192,500.00/yr

Our Commitment

We're trailblazers that dream big, take risks, and challenge cybersecurity's status quo. It's simple: we can't accomplish our mission without diverse teams innovating, together.