Palo Alto Prisma Access Engineer

Position Summary - Palo Alto Prisma Access Engineer - (Strata Cloud Manager)

We are seeking a highly specialized Senior Palo Alto Prisma Access Deployment Engineer with 5+ years of experience to drive the end-to-end implementation and architecture of our Secure Access Service Edge (SASE) environment.

Prisma Access Deployment: Hands-on experience building and launching Prisma Access for Mobile Users and Remote Networks from scratch.

Strata Cloud Manager: Expertise using Strata Cloud Manager (SCM) for cloud-managed SASE configuration, folder hierarchies, and unified policy management.

Core SASE Components: Proficiency configuring ZTNA 2.0, Secure Web Gateway (SWG), CASB, and Cloud-Delivered FWaaS.

Palo Alto Core Tech : Deep knowledge of cloud-managed Next-Generation Firewalls (NGFW), User-ID, App-ID, and GlobalProtect clients.

Enterprise Routing: Strong command of BGP peering, policy-based routing, and building secure IPsec/GRE tunnels to the SASE backbone.

SSL/TLS Decryption: Practical experience designing and deploying cloud-managed traffic decryption strategies and URL filtering.

Identity Integration: Experience connecting Prisma Access to IdPs like Okta, Azure AD/Entra ID, or Ping via SAML 2.0.

Advanced Troubleshooting: Skill in isolating routing, security policy, and client connectivity issues using SCM dashboards, logs, and packet captures.

Preferred Qualifications & Certifications Palo Alto Networks Certified SASE Expert (PCSAE) or Palo Alto Networks Certified Network Security Engineer (PCNSE) is highly preferred.