Network Engineer IV - Palo Alto Prisma

The role is for a senior Network Engineer specializing in Palo Alto Prisma SASE solutions, supporting enterprise-level operations and incident management within a managed services environment.

Location: United States

Salary: $97,000 – $132,000

Responsibilities

• Participate in a 24×7 on‑call rotation as a Tier‑3 escalation engineer for Prisma SASE.
• Troubleshoot and resolve complex issues across Prisma SD‑WAN control and data planes, Prisma Access, GlobalProtect, IPsec, and cloud‑delivered firewalling.
• Lead high‑severity incident response, customer communications, and root cause analysis (RCA).
• Support Prisma SASE architectures including SD‑WAN and Access for ZTNA, SWG, and FWaaS.
• Own the full service lifecycle: customer onboarding, change management, platform upgrades and migrations, decommissioning.
• Validate and enforce security policies, routing, segmentation strategies, high availability, and resiliency standards.
• Support advanced routing implementations including BGP and OSPF.
• Enable and support hybrid and cloud connectivity with AWS, Azure, and Google Cloud Platform.
• Support Zero Trust Networking including ZTNA, SWG, and FWaaS, and integrate Prisma Access with identity providers.
• Contribute to automation and standardization using APIs, Python, Ansible, or Terraform.
• Improve observability through dashboards and monitoring platforms.
• Develop and maintain SOPs, operational runbooks, troubleshooting guides, and service readiness documentation.
• Mentor Tier‑1 and Tier‑2 engineers.
• Collaborate with architecture, product, and service management teams.

Requirements

• Hands‑on expertise with Prisma SD‑WAN and Prisma Access.
• Strong understanding of cloud‑delivered security architectures, SD‑WAN overlays, traffic steering, and policy enforcement.
• Advanced WAN and routing expertise including BGP and OSPF.
• Experience with multi‑vendor networking solutions such as Fortinet, Cisco SD‑WAN, VMware VeloCloud, Juniper Mist/SSR.
• 10+ years of hands‑on network engineering experience.
• Configuration and support experience with routers, switches, firewalls, hubs, and WAN infrastructure.
• Experience with hardware and software firewalls like Palo Alto, Fortinet, Check Point.
• Proficiency with network monitoring and performance analysis tools, Visio.
• Familiarity with wireless technologies, site surveys, and security intelligence sources.
• Certifications: Palo Alto Networks Certified SD-WAN Engineer, Security Service Edge Engineer, Cloud Security Engineer (highly recommended), Cisco CCNP or CCIE (highly recommended).