Palo Alto Prisma SD-WAN Architect

• Design end-to-end Prisma SD-WAN architecture across AWS, branches, data centers, and cloud environments
• Develop HLD and LLD documentation for SD-WAN deployments
• Design AWS-hosted ION Virtual Appliance architecture with HA and multi-region resiliency
• Deploy and onboard Prisma SD-WAN ION appliances in AWS
• Integrate AWS VPC, Transit Gateway, and Direct Connect with the Prisma SD-WAN fabric
• Configure application-aware routing, QoS, path selection, WAN overlays, and VPN fabrics
• Lead greenfield and brownfield SD-WAN migrations
• Design HA, failover, redundancy, and disaster recovery solutions
• Integrate Prisma Access, Palo Alto SD-WAN, and NGFW
• Lead traditional WAN and third-party SD-WAN migration initiatives
• Troubleshoot routing, tunnel, connectivity, and application performance issues
• Provide L3/L4 engineering support and work with Palo Alto TAC on critical incidents
• Prepare HLD, LLD, MOPs, migration runbooks, rollback plans, and SOPs
• Lead architecture reviews, customer workshops, and technical solution presentations

Mandatory Certifications:

• Palo Alto PCNSA / PCNSE
• AWS Solutions Architect Associate / Professional
• Palo Alto Prisma SD-WAN Certification preferred
• CCNP Enterprise preferred

Preferred Experience:

• AWS-hosted Prisma SD-WAN ION deployments
• Prisma Access implementation
• Data Center Exit programs
• Multi-cloud networking across AWS/Azure
• BFSI enterprise environments
• Large-scale SD-WAN migration programs covering 100+ sites

Key Deliverables:

• AWS-Prisma SD-WAN HLD & LLD
• ION HA Cluster Design
• Routing & Security Architecture
• Migration Strategy & Runbooks
• UAT & Production Deployment
• Knowledge Transfer & Operational Documentation

• Palo Alto Prisma SD-WAN (ION) On-Prem & AWS
• Strata Cloud Manager (SCM)
• Prisma Access
• BGP, OSPF, Static Routing & ECMP
• IPSec VPN & GRE Tunnels
• SD-WAN High Availability (HA)
• MPLS, DIA & Broadband Connectivity
• Traffic Engineering & Application-Aware Routing
• AWS VPC, Transit Gateway & Direct Connect
• AWS Route Tables, Security Groups & NACLs
• AWS Networking & Hybrid Cloud Connectivity
• Palo Alto NGFW
• Zero Trust Architecture