Network Engineer IV

Key Responsibilities

• Participate in a 24×7 on-call rotation as a Tier-3 escalation engineer for Prisma SASE.
• Troubleshoot and resolve complex issues across:
• Prisma SD-WAN control and data planes
• Prisma Access (Remote Networks, Mobile Users, Service Connections)
• GlobalProtect, IPsec, and cloud-delivered firewalling
• Lead high-severity incident response, customer communications, and root cause analysis (RCA).
• Act as a technical escalation point during major outages.
• Lead support efforts of Palo Alto Prisma SASE architectures, including:
• Prisma SD-WAN branch and hub designs
• Prisma Access for ZTNA, SWG, and FWaaS
• Owning the full service lifecycle:
• Customer onboarding
• Change management
• Platform upgrades and migrations
• Decommissioning
• Validate and enforce:
• Security policies
• Routing and segmentation strategies
• High availability and resiliency standards
• Support advanced routing implementations:
• BGP (required) including policy control, filtering, and failover
• OSPF
• Ensure optimized traffic steering, SLA adherence, performance, and application visibility.
• Support:
• Zero Trust Network Access (ZTNA)
• Secure Web Gateway (SWG)
• Cloud-delivered firewall policies (FWaaS)
• Integrate Prisma Access with:
• Identity providers (SAML, MFA)
• Remote and mobile user access models
• Partner with security teams to align network enforcement with enterprise security posture.
• Contribute to automation and standardization using:
• APIs, Python, Ansible, or Terraform (preferred)
• Improve observability through:
• Prisma dashboards
• Monitoring platforms (e.g., LogicMonitor, SNMP, API-based telemetry)
• Develop and maintain:
• SOPs and operational runbooks
• Troubleshooting and escalation guides
• Service readiness documentation for new Prisma releases
• Mentor Tier-1 and Tier-2 engineers.
• Collaborate with Architecture, Product, and Service Management teams to evolve the Prisma SASE managed offering.

Required Technical Skills

• Hands-on expertise with:
• Prisma SD-WAN
• Prisma Access
• Strong understanding of:
• Cloud-delivered security architectures
• SD-WAN overlays, underlays, and service insertion models
• Traffic steering and policy enforcement
• Networking Fundamentals:
• Advanced WAN and routing expertise:
• BGP (required) including policy control, filtering, and failover
• OSPF
• Strong knowledge of:
• High availability and redundancy design
• QoS and application-aware routing
• NAT and firewall concepts
• TCP/IP and dynamic routing protocols
• Multi-Vendor Networking Awareness:
• Experience with one or more of the following (Prisma remains the primary focus):
• Fortinet Secure SD-WAN / FortiSASE
• Cisco SD-WAN, Meraki
• VMware VeloCloud
• Juniper Mist / SSA
• Ability to translate architectures and concepts across vendors

Qualifications & Experience

• 10+ years of hands-on network engineering experience
• Strong experience with configuration and support of:
• Routers, switches, firewalls, hubs, and WAN infrastructure
• Prior experience in network design or sales engineering is a plus
• Proficiency with:
• Network monitoring and performance analysis tools
• Visio for detailed network diagrams
• Familiarity with:
• Wireless technologies and site surveys
• Security intelligence sources (e.g., CERT, BugTraq)
• Palo Alto Networks Certified SD-WAN Engineer required
• Palo Alto Networks Certified Security Service Edge Engineer required
• Palo Alto Prisma Certified Cloud Security Engineer (PCCSE) highly recommended
• Cisco certifications (CCNP or CCIE) highly recommended

Education

• Bachelor’s degree in a related field, or equivalent practical experience.

Supervisory Responsibilities

• None.

Compensation

• $92,000-135,000/per annum, i.e. the range is salary not including commission.

Background Check

• Due to U.S. Government requirements applicable to foreign-owned telecommunications providers, non-US citizens may be required to submit to an extensive government agency background check which will necessitate disclosure of sensitive Personally Identifiable Information.