Talentuch

Role Description We are looking for a Principal Network & Security Architect to serve as the company's senior technical authority for enterprise SASE, SD-WAN, and cloud security transformation projects. This person will lead complex, large-scale Palo Alto Networks Prisma deployments, including environments with thousands of mobile users, hundreds of branch locations, next-generation firewalls, multi-cloud infrastructures (AWS and OCI), Megaport connectivity, and migrations from legacy SD-WAN platforms. The architect will own the entire technical lifecycle of each engagement—from discovery and solution design through implementation, migration, testing, and final cutover—while working alongside a dedicated project team. The role also includes providing technical consulting to customers and acting as the primary technical decision-maker throughout the engagement. Key Responsibilities - Lead the architecture and delivery of enterprise Prisma SASE and Prisma SD-WAN solutions, including Strata Cloud Manager, Cloud Identity Engine, Prisma Access, Prisma Browser, ADEM, CASB-X, VM-Series firewalls, PA-Series NGFWs, microsegmentation, and Prisma SD-WAN branch deployments. - Serve as the technical lead for new customer implementations, managing all phases from project kickoff through successful completion. - Produce and maintain technical documentation, including High-Level Designs (HLDs), Low-Level Designs (LLDs), implementation plans, as-built documentation, failover testing results, and cutover runbooks. - Design, implement, and validate cloud connectivity solutions using Megaport, AWS Direct Connect, OCI FastConnect, BGP routing, and secure cloud interconnects. - Lead migrations from Zscaler (ZIA/ZPA) and legacy SD-WAN platforms to Prisma Access and Prisma SD-WAN while ensuring minimal business disruption and maintaining rollback capabilities. - Facilitate customer workshops, discovery sessions, design reviews, project kickoffs, cutovers, and executive presentations, while serving as the escalation point for technical issues and vendor-related challenges. - Support Sales Engineering by providing technical estimates, Statements of Work (SOW), Change Order input, and peer reviews. - Mentor engineering team members, promote knowledge sharing, and develop reusable design standards for future SASE engagements. - Ensure compliance with change management processes, documentation standards, Autotask ticketing, post-mortem reviews, and customer acceptance procedures. - Help establish and mature our security consulting practice by developing scalable methodologies and best practices for SASE, NGFW, Zero Trust, and related security engagements. Qualifications - 12+ years of experience in enterprise networking and cybersecurity. - At least 5 years of hands-on experience designing and deploying large-scale SASE solutions. - Extensive expertise with Palo Alto Networks technologies, including Prisma Access, Prisma SD-WAN (CloudGenix), Strata Cloud Manager, VM-Series, PA-Series NGFW, GlobalProtect, Cloud Identity Engine, ADEM, and CASB-X. - Proven experience leading migrations from Zscaler (ZIA/ZPA) and legacy SD-WAN platforms such as SilverPeak/EdgeConnect, Cisco Viptela, or Fortinet SD-WAN. - Strong networking and security knowledge, including eBGP, iBGP, OSPF, IPsec, Zero Trust architecture, segmentation, DLP, CASB, Quality of Service (CoS), and all OSI networking layers. - Hands-on experience with AWS, OCI, Azure, Megaport, AWS Direct Connect, and OCI FastConnect. - Demonstrated ability to independently deliver complete Prisma implementations without relying on vendor professional services or subcontractors. - Excellent written and verbal communication skills, with the ability to communicate effectively with engineers, CIOs, and CISOs. - Strong organizational and time management skills, with the ability to manage multiple projects simultaneously and perform effectively under pressure. - Willingness to participate in after-hours migration windows and occasional travel when required. Preferred Qualifications - Palo Alto Networks certifications, such as PCNSE, PCSAE, PCCSE, or equivalent. - Additional cloud or networking certifications (Cloud CSP, NaaS Networking Specialty). - Previous experience working for Palo Alto Networks, WWT, Optiv, AHEAD, or another Tier-1 SASE integrator. - Experience with OT/IoT microsegmentation projects. Work Schedule - Full-time - Monday through Friday - 8-hour workday - On-call responsibilities - Weekend and after-hours availability for production cutovers

• Build Next.js and React websites whilst adhering to the company's strategy of reusability, quality, and coding standards • Supporting the team's leadership with technical refinements, Peer review, and technical roadmaps • Support the team with their technical and general work experience to help them achieve their goals • Support the team through technical feedback and improvement areas whilst maintaining an optimistic, ambitious, and growth-based mindset that has the intention of uplifting teammates, rather than putting them down • Communicate technical ideas and concepts clearly, with some consideration for the audience's hearing • Maintain close communication and coordination • Stay continuously aware of the team’s status and work • Communicate concerns, ideas, and critical events clearly and at the right time

• Share your expertise as a guest speaker in webinars. • Discuss practical solutions, emerging trends, and real-world experiences. • Engage with professionals in HR, business management, and consulting sectors. • Prepare a presentation slide deck and participate in discussions.

• Design, build, and maintain scalable cloud infrastructure. • Manage and optimize AWS environments. • Develop and maintain Infrastructure as Code using Terraform. • Build and improve CI/CD pipelines for multiple engineering teams. • Automate deployment, provisioning, and operational processes. • Support containerized workloads and cloud-native applications. • Monitor system health, performance, and reliability. • Improve observability through monitoring, logging, and alerting solutions. • Implement security best practices across infrastructure and deployment pipelines. • Troubleshoot production issues and participate in root-cause analysis. • Collaborate with engineering and data teams to support AI and analytics workloads. • Contribute to infrastructure architecture and platform evolution.

• Design, build, and maintain real-time AI-powered APIs and services in Python. • Architect, optimize, and deploy LLM workflows leveraging LangGraph or similar orchestration frameworks. • Develop agentic logic and reasoning pipelines for conversational and task-based automation. • Build scalable infrastructure to support multi-model, low-latency, and streaming AI experiences. • Collaborate with backend and product teams to translate complex customer workflows into reliable AI systems. • Ensure high performance, reliability, and data security across production workloads. • Deploy and manage applications on modern cloud environments (AWS / GCP). • Implement monitoring, logging, and fault-tolerance mechanisms for production-grade AI systems. • Contribute to architectural and product decisions, balancing innovation, safety, and scalability.

• Develop and maintain solutions within Oracle Cloud applications • Design, develop, and support OTBI (Oracle Transactional Business Intelligence) reports and dashboards • Build and maintain integrations/interfaces using Oracle Integration Cloud (OIC) • Work closely with business stakeholders to gather requirements and translate them into technical solutions • Troubleshoot and resolve issues related to integrations, reporting, and data flows • Ensure performance, scalability, and reliability of Oracle Cloud solutions • Collaborate with cross-functional teams including functional consultants, architects, and external vendors • Participate in system enhancements, upgrades, and implementation activities • Create and maintain technical documentation

• Development and enhancement within SAP Transportation Management (SAP TM) • Implementation of technical requirements in logistics and transport processes • Customizing and development in SAP TM • Integration into existing system landscapes (e.g. ERP, EWM, S/4HANA) • Technical analysis and solution design • Troubleshooting, debugging, and performance optimization • Collaboration with onshore teams and international stakeholders

• Participate in SAP implementation, customization, and integration projects • Analyze business requirements and translate them into technical solutions • Configure and/or develop SAP modules according to project needs • Collaborate with cross-functional teams, including business stakeholders and technical teams • Provide support, troubleshooting, and optimization of existing SAP systems

• Leading the transition from old version to modern microservices architecture • Leading work with tools like GitHub Copilot and other LLMs as daily tools • Accelerating development processes, automating tests, documenting and understanding complex code • Defining new standards for high-volume development environments • Technical leadership - including training, mentoring, and hands-on implementation • Implementing code solutions quickly and with high quality in critical systems environments • Modernization of the system, from Angular 5 & 13 , .NET 4.6.2 & Node.JS 10.15 to the latest versions.

• Troubleshoot, configure, and maintain SD-WAN infrastructure and services. • Monitor network performance, identify bottlenecks, and implement enhancements. • Provide advanced troubleshooting and problem resolution for SD-WAN environments. • Lead network projects, including firmware, patches, vulnerabilities, and documentation. • Serve as the highest point of technical escalation for network issues, particularly those related to SD-WAN and network technologies. • Perform root cause analysis for complex network problems and develop permanent solutions. • Collaborate with Tier 1 and 2 technicians, providing mentorship and guidance. • Provide essential support to voice and data customers, ensuring prompt and effective service delivery. • Assist in managing tickets within support queues, adhering to established processes, SLAs/SLOs/KPIs.