Staff Professional Services Consultant, SASE

About the job

Our Mission

At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place.

Who We Are

In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us!

We believe collaboration thrives in person. That’s why most of our teams work from the office full time, with flexibility when it’s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes. Job Summary

We are seeking a strategic Staff Professional Services Consultant to lead the architecture and deployment of SASE solutions, focusing on the Palo Alto Networks Prisma Access/SASE Platform. You will serve as a trusted advisor to enterprise clients, driving network security transformations and Zero Trust initiatives. Additionally, you will mentor technical teams and oversee end-to-end deployments to ensure scalable and secure environments. This role is crucial for managing complex migrations and optimizing hybrid-cloud architectures.

Key Responsibilities

- Lead design of large-scale, global SASE architectures using Palo Alto Networks Prisma Access.

- Serve as a technical authority and advisor for executives on Zero Trust Network Access transformations.

- Conduct assessments and scoping workshops to align business requirements with secure, scalable technical solutions.

- Design traffic steering and high-availability frameworks for complex hybrid-cloud and multi-cloud environments.

- Oversee end-to-end deployment of Prisma Access, including Cloud SWG, CASB, and FWaaS.

- Integrate SASE solutions with enterprise Identity Providers like Okta or Azure AD using SAML/SSO.

- Manage complex migrations from legacy VPNs and on-premises proxies to cloud-native Prisma Access environments.

- Act as the primary technical escalation point for troubleshooting routing, IPsec/SSL VPNs, and performance issues.

- Mentor senior and junior consultants to foster a culture of continuous learning and technical excellence.

- Develop deployment templates, best practice documentation, and automation scripts to streamline future service deliveries.

Qualifications

- 12+ years of progressive experience in enterprise networking and network security.

- 4+ years of hands-on experience designing and implementing Prisma Access and Prisma SD-WAN solutions.

- Deep understanding of routing protocols, particularly BGP, and enterprise WAN architectures.

- Strong proficiency in Panorama and Strata Cloud Manager for centralized SASE policy management.

- Extensive experience with IPsec, SSL/TLS decryption, GlobalProtect, and public cloud networking.

- Exceptional communication skills to articulate complex technical concepts to technical and non-technical stakeholders.

Preferred Qualifications

- Industry-relevant SASE Certifications.

- Advanced certifications such as PCNSE, PCSAE, or PMSE.

- Experience utilizing infrastructure-as-code and automation tools like Terraform, Ansible, or Python APIs.

- Prior experience working in a Professional Services, Systems Integrator, or VAR environment.

- Deep understanding of broader Zero Trust frameworks and ecosystem integrations.

Our Commitment

We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together.

We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at   accommodations@paloaltonetworks.com .

Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.

All your information will be kept confidential according to EEO guidelines.

Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.