Sr. Professional Services Consultant, Prisma Access/ SASE

Company Description

Our Mission

At Palo Alto Networks® everything starts and ends with our mission:

Being the cybersecurity partner of choice, protecting our digital way of life.
Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and we’re looking for innovators who are as committed to shaping the future of cybersecurity as we are.

Who We Are

We take our mission of protecting the digital way of life seriously. We are relentless in protecting our customers and we believe that the unique ideas of every member of our team contributes to our collective success. Our values were crowdsourced by employees and are brought to life through each of us everyday - from disruptive innovation and collaboration, to execution. From showing up for each other with integrity to creating an environment where we all feel included.

As a member of our team, you will be shaping the future of cybersecurity. We work fast, value ongoing learning, and we respect each employee as a unique individual. Knowing we all have different needs, our development and personal wellbeing programs are designed to give you choice in how you are supported. This includes our FLEXBenefits wellbeing spending account with over 1,000 eligible items selected by employees, our mental and financial health resources, and our personalized learning opportunities - just to name a few!

Job Description

Your Career 

As a Professional Services Consultant (SASE), you’ll get into the details of our platform. You will push the buttons, flip the levers, turn the knobs. You do not shy away from difficult challenges as it relates to cybersecurity, implementations, and integrations. You are the technical authority and will interact directly with our customers to help them secure their digital environments. The customers are counting on you to perform this work and train their staff. And while experience on the company’s platform is desired, even more important is having a solid foundation in networking and security technologies combined with excellent communication skills. 

In fact, extensive experience with a competitor’s technology can play to your advantage. Many of the opportunities involve a client migrating to our platform for the first time, so understanding the nuances of that technology will enable you to be a better Palo Alto Networks consultant. And don't worry, we will send you to our Professional Services Academy to prepare you for the role, so you are experienced with our suite of services and products before you first meet the customer. 

Your Impact

As a Principal Professional Services Consultant (SASE) at Palo Alto Networks, you will serve as the highest-level technical authority and strategic driver for our Secure Access Service Edge (SASE) solutions, including Prisma Access, Prisma Access Browser and SDWAN. You will be instrumental in leading technical initiatives, mentoring engineering teams, ensuring successful customer outcomes, and supporting the evolution of our next-generation security services.

Key Responsibilities 

• Provide technical oversight, direction and expertise for all SASE projects 

• Establish and promote Palo Alto Networks engineering best practices across deployments and engagements.

• Drive customer satisfaction through adoption and by partnering closely with Project Management and other teams.

• Ensure the highest levels of client satisfaction by delivering consistent, high-quality technical results setting the standard.
   

Technical Execution and Problem Solving

• Troubleshoot and resolve complex SASE-related issues, including advanced security, networking, and cloud architecture problems.

• Identify, design, and implement solutions to improve performance, reliability, and security of Prisma Access and Prisma Access Browser deployments.

• Provide technical leadership in migrating customers from legacy remote access solutions to Palo Alto Networks SASE platforms.

• Build custom security policies and application signatures tailored to individual client needs.

• Provide after hours and weekend on-call support, as needed, to support maintenance activities

• Work with our Technical Assistance Center to troubleshoot and diagnose support cases

• Assist pre-sales team with assessment and scoping

Qualifications

Your Experience

• 8+ years of industry hands-on experience with deep expertise in network security, cloud infrastructure, and related technologies

• Proven expertise in deploying, and optimizing Palo Alto Networks SASE platforms, with technical knowledge of Prisma Access, Prisma Access Browser, GlobalProtect, and Next-Generation Firewalls (NGFW)

• Hands-on experience with remote user access technologies, including IPSec VPN, SSL VPN, Explicit Proxy, tunneling and encryption protocols such as SSL/TLS, IPSec, and GRE, with strong familiarity with PKI and certificate management (public/private).

• Experience with authentication methodologies (2FA, SAML, RADIUS, LDAP, TACACS, Certificates) and directory services including Okta, Active Directory, Azure ADFS, Ping, Entra ID, and OneLogin

• Strong routing expertise, including BGP, static routing, traffic steering, redistribution, and policy-based forwarding (PBF) in enterprise network environments

• Hands on experience of NGFW capabilities, configuration, and deployment, including Panorama, App-ID, User-ID, Threat Prevention, URL Filtering, SSL Decryption, CASB, DLP,  IP, NAT, routing protocols, IPSec VPNs, and how these elements interact with end-user applications and cloud services

• Exceptional written and verbal communication skills, with the ability to clearly articulate technical concepts to leadership, technical peers, and non-technical stakeholders

• Comfortable working both independently and as part of cross-functional teams, with the ability to manage multiple complex projects under pressure with direct customer-facing consulting experience, with a strong track record of delivering high-impact outcomes and executive-level presentations
• Must be able to travel up to 15% of the time

Preferred 

• Practical experience with SD-WAN, preferably Prisma SD-WAN (formerly CloudGenix) with the ability to implement and troubleshoot complex edge connectivity

• Familiarity with enterprise browser technologies, browser features (shortcuts/bookmarks, dev tools, extensions, history, cookies), and commercial browser management (Chrome, Edge, Brave), as well as competitors like Island Enterprise Browser

• Understanding of endpoint management tools such as Microsoft Intune, Jamf, and VMware Workspace ONE, especially as they relate to SASE client deployment and policy enforcement

• Scripting proficiency in PowerShell, Bash, or Python for task automation, with experience identifying and executing automation opportunities to enhance SASE deployments and operations

• Relevant certifications such as PCNSE/PCNSC, CCNP (or equivalent JNCIP-ENT/CCIE/CCDE), CISSP, or CCIE/JNCIE 

Additional Information

The Team

Our professional services team is critical to our success and mission. As part of this team, you enable customer success by providing support to clients post-sale. Our dedication to our customers doesn’t stop once they sign – it evolves.

As threats and technology evolve, we stay in step to accomplish our mission. You’ll be involved in implementing new products, transitioning from old products to new, and will fix integrations and critical issues as they are raised. But you won’t wait for them to be raised, you’ll seek them out, too. We fix and identify technical problems, with a pointed focus of providing the best customer support in the industry.

Compensation Disclosure

The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/commissioned roles) is expected to be between $126,000 - $186,000/YR. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found here.

Our Commitment

We’re problem solvers that take risks and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together.

We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at  accommodations@paloaltonetworks.com.

Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.

All your information will be kept confidential according to EEO guidelines.