Professional Service Staff Consultant

Job Summary

As a Professional Services Consultant focused on SASE, you will serve as a key technical authority and advisory lead helping enterprise customers transform their cloud security architecture. In this role, you will bridge the gap between high‑level strategy and deep technical execution—driving the hands‑on implementation, custom configuration, and architectural integration of our cloud‑delivered security solutions. You do not shy away from complex engineering challenges and thrive when solving intricate routing, security policy, and hybrid‑cloud integration issues.

• Strategic Design:
  Lead high‑visibility technical design workshops and provide architectural governance for complex, enterprise‑wide SASE deployments.
• End‑to‑End Solution Deployment:
  Execute the hands‑on engineering, configuration, and deployment of Prisma Access (including Mobile User/Global Protect environments, Remote Networks, Service Connections) and Prisma SD‑WAN.
• Legacy Migrations & Optimization:
  Guide enterprise customers through complex technical migrations off legacy on‑premise hardware (VPNs, proxies) and onto cloud‑native platforms. Identify, design, and implement optimization strategies to maximize platform performance and reliability.
• Policy & Signature Engineering:
  Architect and enforce granular Next‑Generation Firewall (NGFW) capabilities, building custom security profiles, App‑/User‑, and custom application signatures tailored to specific client threat profiles.
• Advanced Troubleshooting & Escalation Management:
  Diagnose and resolve highly complex SASE‑related routing, security, and cloud architecture issues. Collaborate seamlessly with the Technical Assistance Center (TAC) and Account Teams to manage critical customer escalations.
• Service Delivery Excellence:
  Manage customer expectations, provide proactive feedback loops, and mentor junior engineers to ensure service delivery consistently exceeds operational metrics. Participate in occasional after‑hours maintenance windows or on‑call support as required for critical project milestones.

• 5+ years of customer‑facing experience in a technical consulting, Professional Services, or Solutions Architecture role, with a proven track record of managing enterprise project scopes and client relationships.
• 2–3 years of hands‑on experience in the architectural design, deployment, and optimization of cloud‑delivered security architectures (Prisma Access, Prisma SD‑WAN, Prisma Browser, and Strata Cloud Manager/Panorama).
• Strong foundational mastery of TCP/IP, DNS, advanced routing concepts (BGP, OSPF, policy‑based forwarding, traffic steering), and complex IPSec/GRE tunneling required to bridge hybrid‑cloud infrastructure.
• Deep technical experience configuring and advising on Identity Provider (IdP) and directory service integrations (Okta, Microsoft Entra , Ping Identity, One Login) utilizing SAML 2.0, OIDC, RADIUS, and Multi‑Factor Authentication (MFA).
• Proficient in the engineering and deployment of URL filtering, HTTP/S proxies, Enterprise Data Loss Prevention (DLP), Remote Browser Isolation (RBI), and advanced SSL/TLS decryption (including PKI and certificate management).
• Bachelor’s degree in Computer Science, Cyber Security, or equivalent practical training. Highly preferred certifications include Palo Alto Networks elite tracks (PCNSE, PCNSC, PCCSE) or industry equivalents (CCNP/CCIE, JNCIP/JNCIE, CISSP).
• Ability to travel up to 15% of the time to meet customer implementation requirements.

The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non‑sales roles) or base salary + commission target (for sales/com‑missioned roles) is expected to be the annual range listed below. The offered compensation may also include restricted stock units and a bonus.

A description of our employee benefits may be found here ().

$ - $/yr

We are committed to providing reasonable accommodations for all qualified individuals with a disability.

Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.

All your information will be kept confidential according to EEO guidelines.

Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.