Network Engineer IV - Palo Alto Prisma

About the role

This is a direct hire position for a Network Engineer IV specializing in Palo Alto Prisma. The role is remote and focuses on serving as the Tier-3 escalation resource for Prisma SASE within a managed services environment. The team is looking for an experienced engineer to resolve complex problems across Prisma SD-WAN, Prisma Access, GlobalProtect, IPsec, and cloud-delivered firewalling.

Responsibilities

• Act as the Tier-3 escalation resource for Prisma SASE, resolving complex problems across Prisma SD-WAN, Prisma Access, GlobalProtect, IPsec, and cloud-delivered firewalling.
• Take the lead on high-severity incidents, driving customer updates and performing root cause analysis, while overseeing the full lifecycle including onboarding, changes, upgrades, migrations, and decommissioning.
• Uphold standards for routing, segmentation, security policy, high availability, and resiliency, and provide support for advanced routing (BGP required, OSPF) and hybrid or cloud connectivity across AWS, Azure, and GCP.
• Deploy and maintain ZTNA, SWG, FWaaS, and identity integrations such as SAML and MFA, and contribute to automation efforts using APIs, Python, Ansible, and Terraform while enhancing monitoring and telemetry.
• Develop and keep current SOPs, runbooks, and escalation documentation, and provide mentorship to Tier-1 and Tier-2 engineers.
• Partner with Security, Network Operations, Engineering, Architecture, Product, and Service Management teams to advance the Prisma SASE managed services offering for our client, a leading managed services provider.

Requirements

• A minimum of ten years of practical network engineering work within enterprise or managed services settings, with direct experience operating both Prisma SD-WAN and Prisma Access.
• Hands-on familiarity with firewall platforms from Palo Alto, Fortinet, or Check Point, along with solid comfort using network monitoring and performance utilities and Visio.
• Advanced routing capability, with BGP being mandatory and OSPF also expected, plus a thorough grasp of cloud-based security, SD-WAN overlays and underlays, traffic steering, and segmentation.
• Demonstrated ability to support hybrid and cloud networking spanning AWS, Azure, and GCP, together with strong command of HA, QoS, NAT, VPN, and TCP/IP concepts, and experience with routers, switches, firewalls, and WAN infrastructure.
• Two required credentials: the Palo Alto Networks Certified SD-WAN Engineer and the Palo Alto Networks Certified Security Service Edge Engineer, plus a bachelor's degree in a relevant discipline or comparable experience.

Pay

$115,000 - $130,000

Benefits

Full benefits

Sponsorship available: No

This response is AI-generated, for reference only.