Job Summary

As a Professional Services Consultant focused on SASE, you will serve as a key technical authority and advisory lead helping enterprise customers transform their cloud security architecture. In this role, you will bridge the gap between high-level strategy and deep technical execution-driving the hands-on implementation, custom configuration, and architectural integration of our cloud-delivered security solutions. You do not shy away from complex engineering challenges and thrive when solving intricate routing, security policy, and hybrid-cloud integration issues.

You will act as the trusted technical face of Palo Alto Networks, interacting directly with enterprise clients to secure their digital environments and empower their internal teams. While deep platform experience is highly desired, we place immense value on a foundational mastery of networking and security principles, backed by exceptional communication skills. A strong background in migrating clients away from competitor technologies is a distinct advantage. To ensure your success, you will be supported by our Professional Services Academy, equips you with deep product expertise before your first customer engagement.

Key Responsibilities

• Strategic Design: Lead high-visibility technical design workshops and provide architectural governance for complex, enterprise-wide SASE deployments.
• End-to-End Solution Deployment: Execute the hands-on engineering, configuration, and deployment of Prisma Access (including Mobile User/GlobalProtect environments, Remote Networks, Service Connections) and Prisma SD-WAN.
• Legacy Migrations & Optimization: Guide enterprise customers through complex technical migrations off legacy on-premise hardware (VPNs, proxies) and onto cloud-native platforms. Identify, design, and implement optimization strategies to maximize platform performance and reliability.
• Policy & Signature Engineering: Architect and enforce granular Next-Generation Firewall (NGFW) capabilities, building custom security profiles, App-ID/User-ID configurations, and custom application signatures tailored to specific client threat profiles.
• Advanced Troubleshooting & Escalation Management: Diagnose and resolve highly complex SASE-related routing, security, and cloud architecture issues. Collaborate seamlessly with the Technical Assistance Center (TAC) and Account Teams to manage critical customer escalations.
• Service Delivery Excellence: Manage customer expectations, provide proactive feedback loops, and mentor junior engineers to ensure service delivery consistently exceeds operational metrics. Participate in occasional after-hours maintenance windows or on-call support as required for critical project milestones.

Qualifications

• 5+ years of customer-facing experience in a technical consulting, Professional Services, or Solutions Architecture role, with a proven track record of managing enterprise project scopes and client relationships.
• 2-3 years of hands-on experience in the architectural design, deployment, and optimization of cloud-delivered security architectures (Prisma Access, Prisma SD-WAN, Prisma Browser, and Strata Cloud Manager/Panorama).
• Strong foundational mastery of TCP/IP, DNS, advanced routing concepts (BGP, OSPF, policy-based forwarding, traffic steering), and complex IPSec/GRE tunneling required to bridge hybrid-cloud infrastructure.
• Deep technical experience configuring and advising on Identity Provider (IdP) and directory service integrations (Okta, Microsoft Entra ID, Ping Identity, OneLogin) utilizing SAML 2.0, OIDC, RADIUS, and Multi-Factor Authentication (MFA).
• Proficient in the engineering and deployment of URL filtering, HTTP/S proxies, Enterprise Data Loss Prevention (DLP), Remote Browser Isolation (RBI), and advanced SSL/TLS decryption (including PKI and certificate management).
• Bachelor's degree in Computer Science, Cyber Security, or equivalent practical training. Highly preferred certifications include Palo Alto Networks elite tracks (PCNSE, PCNSC, PCCSE) or industry equivalents (CCNP/CCIE, JNCIP/JNCIE, CISSP).
• Ability to travel up to 15% of the time to meet customer implementation requirements.

Compensation Disclosure

The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/com-missioned roles) is expected to be the annual range listed below. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found here.

$140,000.00 - $192,500.00/yr