Role Description
We are looking for a Principal Network & Security Architect to serve as the company's senior technical authority for enterprise SASE, SD-WAN, and cloud security transformation projects. This person will lead complex, large-scale Palo Alto Networks Prisma deployments, including environments with thousands of mobile users, hundreds of branch locations, next-generation firewalls, multi-cloud infrastructures (AWS and OCI), Megaport connectivity, and migrations from legacy SD-WAN platforms.
The architect will own the entire technical lifecycle of each engagement—from discovery and solution design through implementation, migration, testing, and final cutover—while working alongside a dedicated project team. The role also includes providing technical consulting to customers and acting as the primary technical decision-maker throughout the engagement.
Key Responsibilities
-
Lead the architecture and delivery of enterprise Prisma SASE and Prisma SD-WAN solutions, including Strata Cloud Manager, Cloud Identity Engine, Prisma Access, Prisma Browser, ADEM, CASB-X, VM-Series firewalls, PA-Series NGFWs, microsegmentation, and Prisma SD-WAN branch deployments.
-
Serve as the technical lead for new customer implementations, managing all phases from project kickoff through successful completion.
-
Produce and maintain technical documentation, including High-Level Designs (HLDs), Low-Level Designs (LLDs), implementation plans, as-built documentation, failover testing results, and cutover runbooks.
-
Design, implement, and validate cloud connectivity solutions using Megaport, AWS Direct Connect, OCI FastConnect, BGP routing, and secure cloud interconnects.
-
Lead migrations from Zscaler (ZIA/ZPA) and legacy SD-WAN platforms to Prisma Access and Prisma SD-WAN while ensuring minimal business disruption and maintaining rollback capabilities.
-
Facilitate customer workshops, discovery sessions, design reviews, project kickoffs, cutovers, and executive presentations, while serving as the escalation point for technical issues and vendor-related challenges.
-
Support Sales Engineering by providing technical estimates, Statements of Work (SOW), Change Order input, and peer reviews.
-
Mentor engineering team members, promote knowledge sharing, and develop reusable design standards for future SASE engagements.
-
Ensure compliance with change management processes, documentation standards, Autotask ticketing, post-mortem reviews, and customer acceptance procedures.
-
Help establish and mature our security consulting practice by developing scalable methodologies and best practices for SASE, NGFW, Zero Trust, and related security engagements.
Qualifications
-
12+ years of experience in enterprise networking and cybersecurity.
-
At least 5 years of hands-on experience designing and deploying large-scale SASE solutions.
-
Extensive expertise with Palo Alto Networks technologies, including Prisma Access, Prisma SD-WAN (CloudGenix), Strata Cloud Manager, VM-Series, PA-Series NGFW, GlobalProtect, Cloud Identity Engine, ADEM, and CASB-X.
-
Proven experience leading migrations from Zscaler (ZIA/ZPA) and legacy SD-WAN platforms such as SilverPeak/EdgeConnect, Cisco Viptela, or Fortinet SD-WAN.
-
Strong networking and security knowledge, including eBGP, iBGP, OSPF, IPsec, Zero Trust architecture, segmentation, DLP, CASB, Quality of Service (CoS), and all OSI networking layers.
-
Hands-on experience with AWS, OCI, Azure, Megaport, AWS Direct Connect, and OCI FastConnect.
-
Demonstrated ability to independently deliver complete Prisma implementations without relying on vendor professional services or subcontractors.
-
Excellent written and verbal communication skills, with the ability to communicate effectively with engineers, CIOs, and CISOs.
-
Strong organizational and time management skills, with the ability to manage multiple projects simultaneously and perform effectively under pressure.
-
Willingness to participate in after-hours migration windows and occasional travel when required.
Preferred Qualifications
-
Palo Alto Networks certifications, such as PCNSE, PCSAE, PCCSE, or equivalent.
-
Additional cloud or networking certifications (Cloud CSP, NaaS Networking Specialty).
-
Previous experience working for Palo Alto Networks, WWT, Optiv, AHEAD, or another Tier-1 SASE integrator.
-
Experience with OT/IoT microsegmentation projects.
Work Schedule
-
Full-time
-
Monday through Friday
-
8-hour workday
-
On-call responsibilities
-
Weekend and after-hours availability for production cutovers