Professional Services Consultant - SASE / Prisma Access

Our Mission

At Palo Alto Networks® everything starts and ends with our mission:

Being the cybersecurity partner of choice, protecting our digital way of life.
Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and we’re looking for innovators who are as committed to shaping the future of cybersecurity as we are.

Who We Are

We take our mission of protecting the digital way of life seriously. We are relentless in protecting our customers and we believe that the unique ideas of every member of our team contributes to our collective success. Our values were crowdsourced by employees and are brought to life through each of us everyday - from disruptive innovation and collaboration, to execution. From showing up for each other with integrity to creating an environment where we all feel included.

As a member of our team, you will be shaping the future of cybersecurity. We work fast, value ongoing learning, and we respect each employee as a unique individual. Knowing we all have different needs, our development and personal wellbeing programs are designed to give you choice in how you are supported. This includes our FLEXBenefits wellbeing spending account with over 1,000 eligible items selected by employees, our mental and financial health resources, and our personalized learning opportunities - just to name a few!

Your Career 

As a Professional Services Consultant (SASE), you’ll get into the details of our platform. You will push the buttons, flip the levers, turn the knobs. You do not shy away from difficult challenges as it relates to cybersecurity, implementations, and integrations. You are the technical authority and will interact directly with our customers to help them secure their digital environments. The customers are counting on you to perform this work and train their staff. And while experience on the company’s platform is desired, even more important is having a solid foundation in networking and security technologies combined with excellent communication skills. 

In fact, extensive experience with a competitor’s technology can play to your advantage. Many of the opportunities involve a client migrating to our platform for the first time, so understanding the nuances of that technology will enable you to be a better Palo Alto Networks consultant. And don't worry, we will send you to our Professional Services Academy to prepare you for the role, so you are experienced with our suite of services and products before you first meet the customer. 

Your Impact

As a Professional Services Consultant (SASE) at Palo Alto Networks, you will serve as the highest-level technical authority and strategic driver for our Secure Access Service Edge (SASE) solutions, including Prisma Access, Prisma Access Browser and SDWan. You will be instrumental in leading technical initiatives, mentoring engineering teams, ensuring successful customer outcomes, and supporting the evolution of our next-generation security services.

Business and Project Ownership

• Own overall technical business performance related to fiscal goals, delivery timelines, and operational targets

• Provide technical oversight and direction for all SASE projects 

• Drive project completion on time, manage project backlog, and ensure alignment with strategic business objectives

Technical Leadership and Mentorship

• Lead and mentor engineers across various levels, ensuring high technical standards and consistency in SASE delivery.

• Establish and promote engineering best practices across deployments and engagements.

• Contribute to resource planning and the development of future SASE expertise within the Center of Excellence (CoE).

Customer Engagement and Escalation Management

• Drive customer satisfaction by partnering closely with Project Management and other teams to meet high CSAT scores and strong response rates.

• Act as a key escalation point for complex technical and customer-facing issues, providing clear resolution paths and stakeholder communication.

• Ensure the highest levels of client satisfaction by delivering consistent, high-quality technical results.
   

Technical Execution and Problem Solving

• Troubleshoot and resolve complex SASE-related issues, including advanced security, networking, and cloud architecture problems.

• Identify, design, and implement solutions to improve performance, reliability, and security of Prisma Access and Prisma Access Browser deployments.

• Provide technical leadership in migrating customers from legacy remote access solutions to Palo Alto Networks SASE platforms.

• Build custom security policies and application signatures tailored to individual client needs.
   

Cross-Functional Collaboration and Communication

• Work closely with cross-functional teams including networking, cloud, and cybersecurity to deliver end-to-end SASE solutions.

• Lead technical meetings and represent Professional Services in discussions with internal Palo Alto Networks support organizations including Customer Support.

• Effectively communicate complex technical concepts to both technical and non-technical audiences.

Training and Enablement

• Ensure technical teams receive ongoing enablement in Prisma Access, Prisma Access Browser, SDWan, and broader SASE technologies.

• Maintain training programs to ensure consistent delivery quality across all geographies and teams.
   

Operational and Support Responsibilities

• Analyze logs and events to proactively identify and troubleshoot issues.

• Collaborate with the Technical Assistance Center (TAC) to escalate and resolve customer issues as needed.

• Provide support for planned maintenance activities, including occasional after-hours and weekend on-call support.

• Guide clients through code upgrades and long-term best practices for solution maintenance.
  Ensure customer deliverables are met on time and within the agreed project scope.

Your Experience

• Proven expertise in architecting, deploying, and optimizing Palo Alto Networks SASE platforms, with deep technical knowledge of Prisma Access, Prisma Access Browser, GlobalProtect, and Next-Generation Firewalls (NGFW)

• Years of hands-on experience with remote user access technologies, including IPSec VPN, SSL VPN, Explicit Proxy, tunneling and encryption protocols such as SSL/TLS, IPSec, and GRE, with strong familiarity with PKI and certificate management (public/private).

• Extensive experience with authentication methodologies (2FA, SAML, RADIUS, LDAP, TACACS, Certificates) and directory services including Okta, Active Directory, Azure ADFS, Ping, Entra ID, and OneLogin

• Strong routing expertise, including BGP, static routing, traffic steering, redistribution, and policy-based forwarding (PBF) in enterprise network environments

• In-depth knowledge of NGFW capabilities, configuration, and deployment, including Panorama, App-ID, User-ID, Threat Prevention, URL Filtering, SSL Decryption, CASB, DLP,  IP, NAT, routing protocols, IPSec VPNs, and how these elements interact with end-user applications and cloud services

• Exceptional written and verbal communication skills, with the ability to clearly articulate technical concepts to senior leadership, technical peers, and non-technical stakeholders

• Comfortable working both independently and as part of cross-functional teams, with the ability to manage multiple complex projects under pressure with direct customer-facing consulting experience, with a strong track record of delivering high-impact outcomes and executive-level presentations
   

Nice To Have

• Practical experience with SD-WAN, preferably Prisma SD-WAN (formerly CloudGenix) with the ability to implement and troubleshoot complex edge connectivity

• Familiarity with enterprise browser technologies, browser features (shortcuts/bookmarks, dev tools, extensions, history, cookies), and commercial browser management (Chrome, Edge, Brave), as well as competitors like Island Enterprise Browser

• Understanding of endpoint management tools such as Microsoft Intune, Jamf, and VMware Workspace ONE, especially as they relate to SASE client deployment and policy enforcement

• Scripting proficiency in PowerShell, Bash, or Python for task automation, with experience identifying and executing automation opportunities to enhance SASE deployments and operations

The Team

Our professional services team is critical to our success and mission. As part of this team, you enable customer success by providing support to clients post-sale. Our dedication to our customers doesn’t stop once they sign – it evolves.

As threats and technology evolve, we stay in step to accomplish our mission. You’ll be involved in implementing new products, transitioning from old products to new, and will fix integrations and critical issues as they are raised. But you won’t wait for them to be raised, you’ll seek them out, too. We fix and identify technical problems, with a pointed focus of providing the best customer support in the industry.

Compensation Disclosure

The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/commissioned roles) is expected to be between $126,000 - $186,000/YR. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found here.

Our Commitment

We’re problem solvers that take risks and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together.

We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at  [email protected].

Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.

All your information will be kept confidential according to EEO guidelines.