> Markdown version of [/jobs/ext/2083249-palo-alto-prisma-sd-wan-architect](https://www.wearedevelopers.com/jobs/ext/2083249-palo-alto-prisma-sd-wan-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Palo Alto Prisma SD-WAN Architect

- **Company:** Northern Base
- **Location:** Portland, OR, United States (Remote available)
- **Salary:** $135,550.0 - $200,500.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Access, Amazon Web Services, Application Performance Management, Microsoft Azure, Border Gateway Protocol, Wireless Broadband, Cloud Computing, Cyber Security, Data Centers, Disaster Recovery, Internet Protocol Security (IP SEC), IP Routing, Virtual Private Networks (VPN), Multi-protocol Systems, Routing, Open Shortest Path First (OSPF), Migration Manager, Zero Trust Network Access, Runbook, Software Deployment, Wide Area Networks, Cloud Platform System, System Availability, Multi-Cloud, HybridCloud, Amazon Virtual Private Cloud (VPC)
- **Published:** August 16, 2026
- **Apply:** https://www.careerjet.com/jobad/us0b3596b88de8b8e1adad92969fd07d7a

## About the Role

* Palo Alto Prisma SD-WAN (ION) On-Prem & AWS
 * Strata Cloud Manager (SCM)
 * Prisma Access
 * BGP, OSPF, Static Routing & ECMP
 * IPSec VPN & GRE Tunnels
 * SD-WAN High Availability (HA)
 * MPLS, DIA & Broadband Connectivity
 * Traffic Engineering & Application-Aware Routing
 * AWS VPC, Transit Gateway & Direct Connect
 * AWS Route Tables, Security Groups & NACLs
 * AWS Networking & Hybrid Cloud Connectivity
 * Palo Alto NGFW
 * Zero Trust Architecture

## Description

* Design end-to-end Prisma SD-WAN architecture across AWS, branches, data centers, and cloud environments
 * Develop HLD and LLD documentation for SD-WAN deployments
 * Design AWS-hosted ION Virtual Appliance architecture with HA and multi-region resiliency
 * Deploy and onboard Prisma SD-WAN ION appliances in AWS
 * Integrate AWS VPC, Transit Gateway, and Direct Connect with the Prisma SD-WAN fabric
 * Configure application-aware routing, QoS, path selection, WAN overlays, and VPN fabrics
 * Lead greenfield and brownfield SD-WAN migrations
 * Design HA, failover, redundancy, and disaster recovery solutions
 * Integrate Prisma Access, Palo Alto SD-WAN, and NGFW
 * Lead traditional WAN and third-party SD-WAN migration initiatives
 * Troubleshoot routing, tunnel, connectivity, and application performance issues
 * Provide L3/L4 engineering support and work with Palo Alto TAC on critical incidents
 * Prepare HLD, LLD, MOPs, migration runbooks, rollback plans, and SOPs
 * Lead architecture reviews, customer workshops, and technical solution presentations

Mandatory Certifications:

 * Palo Alto PCNSA / PCNSE
 * AWS Solutions Architect Associate / Professional
 * Palo Alto Prisma SD-WAN Certification preferred
 * CCNP Enterprise preferred

Preferred Experience:

 * AWS-hosted Prisma SD-WAN ION deployments
 * Prisma Access implementation
 * Data Center Exit programs
 * Multi-cloud networking across AWS/Azure
 * BFSI enterprise environments
 * Large-scale SD-WAN migration programs covering 100+ sites

Key Deliverables:

 * AWS-Prisma SD-WAN HLD & LLD
 * ION HA Cluster Design
 * Routing & Security Architecture
 * Migration Strategy & Runbooks
 * UAT & Production Deployment
 * Knowledge Transfer & Operational Documentation


## Related Videos

- [Demystifying application networking in the cloud](https://www.wearedevelopers.com/videos/675-demystifying-application-networking-in-the-cloud)
- [Technical Documentation - How Can I Write Them Better and Why Should I Care?](https://www.wearedevelopers.com/videos/681-technical-documentation-how-can-i-write-them-better-and-why-should-i-care)
- [Creating a routing app with Google Maps API from scratch](https://www.wearedevelopers.com/videos/831-creating-a-routing-app-with-google-maps-api-from-scratch)
- [Bitcoin SV:  The Massively Scaled Blockchain to Meet Developer Needs](https://www.wearedevelopers.com/videos/20-bitcoin-sv-the-massively-scaled-blockchain-to-meet-developer-needs)
- [Remote Driving on Plant Grounds with State-of-the-Art Cloud Technologies](https://www.wearedevelopers.com/videos/251-remote-driving-on-plant-grounds-with-state-of-the-art-cloud-technologies)
- [Bridging AI and Nomad: a Go-based MCP Server for Cluster Control](https://www.wearedevelopers.com/videos/2063-bridging-ai-and-nomad-a-go-based-mcp-server-for-cluster-control)

## Related Articles

- [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j)
- [Stephan Gillich - Bringing AI Everywhere](https://www.wearedevelopers.com/magazine/489-stephan-gillich-bringing-ai-everywhere)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [5 Reasons Why Attending Conferences in 2026 Matters More Than You Think](https://www.wearedevelopers.com/magazine/692-5-reasons-why-attending-conferences-in-2026-matters-more-than-you-think)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)