> Markdown version of [/jobs/ext/4028167-network-security-sase-architect-palo-alto-networks-senior-manager](https://www.wearedevelopers.com/jobs/ext/4028167-network-security-sase-architect-palo-alto-networks-senior-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Network Security & SASE Architect - Palo Alto Networks Senior Manager

- **Company:** Accenture
- **Location:** San Francisco, CA, United States
- **Experience:** Expert
- **Salary:** $156,000.0 - $208,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Access, Application Programming Interfaces (APIs), Amazon Web Services, Software System Penetration Testing, ARM Architecture, Microsoft Azure, Border Gateway Protocol, Cisco PIX, Cloud Computing, Cloud Computing Security, Cloud Engineering, Cyber Security, Data Centers, Software Design Documents, Network Address Translation, Domain Name System Security Extensions, Domain Name System (DNS), Data-Flow Analysis, Identity and Access Management, Internet Protocol Security (IP SEC), Intrusion Detection and Prevention, Virtual Private Networks (VPN), Python (Programming Language), Network Security, Routing, Network Segmentation, Network Administration, Open Shortest Path First (OSPF), PCI Data Security Standards, Prism (Software), Azure Active Directory, Ping Identity, Ansible, Zero Trust Network Access, Sherwood Applied Business Security Architecture, Security Assertion Markup Language (SAML), Security Information and Event Management, Wide Area Networks, Extensible Markup Language (XML), Data Logging, Computer Networking Systems, Google Cloud, Load Balancing, Okta, System Availability, Multi-Cloud, Firewalls (Computer Science), Juniper, Git, Togaf, National Institute of Standards and Technology Cybersecurity Framework, Palo Alto Networks, Fortinet, Firepower, Restful APIs, Terraform, IoT Security, AIOps, Cisco
- **Published:** October 30, 2026
- **Apply:** https://www.sanfranciscogigs.com/job.asp?id=3480944996&tx=TT4643TTI&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

* Minimum 10 years of experience in enterprise network and network security engineering, architecture or consulting, with progressively increasing technical and leadership responsibility and/or experience and knowledge of network security concepts and architectures around Zero Trust, Zero Trust Network Access (ZTNA), Security Service Edge and macro/micro-segmentation
 * Minimum 5 years of hands-on experience designing, deploying and troubleshooting Palo Alto Networks Next-Generation Firewalls (PAN-OS) and/or firewalls in large, complex enterprise environments, including Panorama-managed estates (device groups, templates, log collection, high availability)
 * Minimum 3 years of hands-on experience designing and deploying Prisma Access
 * Minimum 1 year of hands-on experience with Strata Cloud Manager for cloud-managed NGFW and/or Prisma Access, including Panorama to Strata Cloud Manager migration or coexistence
 * Minimum 5 years of experience architecting enterprise networks and network security, including routing (BGP, OSPF), IPsec VPN, NAT, SD-WAN, DNS, segmentation and high-availability design, and leading advanced troubleshooting across LAN, WAN, data center and public cloud and/or Minimum 5 years of experience leading solution architecture and design for network security transformation programs (firewall migration and consolidation, segmentation, SASE and Zero Trust), including HLD/LLD, bill of materials and architecture governance
 * Minimum 5 years of managing teams of 5 or more resources and delivering projects using a standardized set of project management principles
 * Minimum 3 years of business development experience: shaping proposals, statements of work, estimates and pricing, and presenting solutions to client executives
 * Bachelor's degree or equivalent (minimum 12 years) work experience. (If Associate's Degree, must have minimum 6 years work experience)
 * Travel will be required for this role. The amount of travel will vary from 75 to 100% depending on business need and client requirements

Bonus Points If You Have (Preferred Skills)

 * Palo Alto Networks certifications: an active PCNSE (the exam retired July 31, 2025; certifications stay valid for two years), or the current role-based certifications such as Next-Generation Firewall Engineer, Next-Generation Firewall Analyst (Strata Cloud Manager focused), Security Service Edge Engineer, SD-WAN Engineer or Network Security Professional
 * Technical writing and report generation (architecture and design documents, standards, executive readouts)
 * Industry certifications such as CISSP, CCSP, CCNP or CCIE Security or Enterprise, GIAC (GDSA, GCIA), TOGAF or SABSA
 * Experience with adjacent Palo Alto Networks products: Prisma SD-WAN and SD-WAN for NGFW, VM-Series and CN-Series, Cloud NGFW for AWS and Azure, Enterprise DLP, SaaS Security, IoT Security, Prisma Browser, ADEM, Strata Logging Service and Cortex XSIAM/XDR integration
 * Multi-vendor and competitive knowledge: Zscaler (ZIA/ZPA), Netskope, Cisco (ASA/Firepower, Secure Access, Umbrella), Fortinet, Check Point and Illumio/Guardicore, and experience with firewall migration tooling
 * Automation and infrastructure as code: Terraform (PAN-OS and Prisma Access providers), Ansible, Python, PAN-OS XML/REST APIs and Git-based change workflows
 * Cloud networking and security: AWS (Transit Gateway, Gateway Load Balancer), Azure (Virtual WAN, hub-and-spoke), GCP, and cloud-native firewall services
 * Experience operating, or transitioning clients into, managed network security services; ITIL familiarity
 * Security frameworks and regulations: NIST SP 800-207, CISA Zero Trust Maturity Model, NIST CSF and SP 800-53, ISO 27001, PCI DSS, HIPAA, SOX and FedRAMP
 * Experience in Identity and Access Management (Okta, Microsoft Entra ID, Ping Identity, Cloud Identity Engine) and in IT security testing (penetration testing, vulnerability and technical security assessments)
 * Previous consulting, systems integrator or Palo Alto Networks Professional Services experience; practice or P&L management; familiarity with the Palo Alto Networks NextWave partner program
 * Published thought leadership or speaking experience at industry events

## Description

* Originate, shape and sell network security, Zero Trust and SASE transformation programs built on Palo Alto Networks; lead proposal development, solution and effort estimation, commercial structuring and orals, and carry sales and delivery targets for your area of responsibility.
 * Act as the trusted advisor to client CISOs, CIOs and heads of network and security; translate network security architecture choices into business outcomes, risk reduction and cost cases that executives can act on.
 * Build and grow Accenture's Palo Alto Networks network security capability: co-sell and co-deliver with Palo Alto Networks account, Solutions Consulting and channel teams, and develop offerings, reference architectures, estimating models and accelerators.
 * Represent Accenture as an expert at industry conferences, partner events and client briefings, and publish points of view on NGFW modernization, SASE and Zero Trust.

Architecture, solutioning and design

 * Own the end-to-end solution architecture for network security programs: current-state assessment, target-state design, roadmap, bill of materials, sizing and licensing across data center, campus, branch, public cloud and remote users.
 * Lead high-level and low-level design (HLD/LLD) for Palo Alto Networks Next-Generation Firewall deployments (PA-Series, VM-Series, CN-Series and Cloud NGFW): zone and segmentation design, App-ID, User-ID and Content-ID policy design, SSL/TLS decryption, Cloud-Delivered Security Services (Advanced Threat Prevention, Advanced URL Filtering, Advanced WildFire, Advanced DNS Security), high availability and performance sizing.
 * Architect Prisma Access (SASE/SSE) deployments: Mobile Users (GlobalProtect and explicit proxy), Remote Networks, Service Connections, traffic steering and routing, ZTNA, identity integration (Cloud Identity Engine, Okta, Microsoft Entra ID, SAML/SCIM), SaaS Security, Enterprise DLP, Prisma Browser (formerly Prisma Access Browser) and Autonomous Digital Experience Management (ADEM), including migrations from legacy VPN and on-premises proxy platforms.
 * Define the management and operating model: Panorama design (device groups, templates and template stacks, log collectors, high availability) and Strata Cloud Manager for cloud-managed NGFW and Prisma Access, including Panorama to Strata Cloud Manager migration, policy optimization, best-practice assessment and AIOps adoption, plus Strata Logging Service and SIEM/XSIAM integration.
 * Lead firewall consolidation and migration programs from Check Point, Cisco ASA/Firepower, Fortinet, Juniper and other platforms to Palo Alto Networks: policy rationalization and cleanup, object and rule migration tooling, cutover planning and rollback.
 * Design the surrounding enterprise network: routing (BGP, OSPF), IPsec VPN and SD-WAN (Prisma SD-WAN, SD-WAN for NGFW), NAT, DNS, load balancing, hybrid and multi-cloud connectivity (AWS, Azure, GCP) and macro/micro-segmentation aligned to Zero Trust principles (NIST SP 800-207, CISA Zero Trust Maturity Model).
 * Review and approve designs produced by the team; set design standards, naming conventions and security policy best practices.

Delivery and operations leadership

 * Lead delivery of multi-workstream programs across onshore and global delivery teams: plan, estimate, staff and manage scope, schedule, budget, risk and quality so client deliverables are produced on time and to Accenture project quality specifications.
 * Serve as the highest point of technical escalation: lead root-cause analysis for complex issues across PAN-OS firewalls, Panorama / Strata Cloud Manager, GlobalProtect, Prisma Access, routing, IPsec tunnels, decryption, HA failover and performance degradation, using packet captures, session and flow analysis, global counters and the PAN-OS CLI.
 * Lead the transition of clients into Accenture Network Managed Services: define runbooks, SLAs and KPIs, monitoring and change processes, and ensure a clean handover from build to run.
 * Produce client-ready documentation: architecture decision records, HLD/LLD, migration and test plans, and executive readouts.
 * Interpret the relevance of network security controls to legal, regulatory and framework requirements (NIST CSF and SP 800-53, ISO 27001, PCI DSS, HIPAA, SOX) within the designs you deliver.

People and practice development

 * Build, lead and grow a team of network security architects and engineers: recruit, mentor, set Palo Alto Networks certification paths and run design reviews that raise the team's technical bar.
 * Develop reusable assets: deployment templates, automation (Terraform, Ansible, PAN-OS APIs), migration playbooks, lab environments and demos.
 * Take initiative to communicate, interact and collaborate with Accenture cloud, network, SOC and identity teams so that all aspects of a client outcome are addressed.