Professional Services Consultant-Prisma Access

Role Summary: The Security Consultant will design, implement, and troubleshoot advanced network security solutions using Palo Alto Networks NGFW and SASE technologies, with a primary focus on Prisma Access. The ideal candidate will have expertise in networking, security protocols, and hands-on experience implementing and managing cloud-delivered and enterprise firewall infrastructures.

Key Responsibilities:

• Deploy, configure, and manage Palo Alto NGFWs and cloud-delivered security services, including Prisma Access, GlobalProtect VPN, and Panorama / Strata Cloud Manager, from scratch.
• Design, implement, and operate Prisma Access architectures for mobile users, remote networks, and service connections, ensuring secure and scalable connectivity.
• Provide expert-level troubleshooting of network and security issues across on-prem and cloud environments, including packet flow, NAT, QoS, and IPSEC VPN within Prisma Access.
• Conduct advanced analysis using tools like Wireshark and Prisma Access logs to diagnose and resolve security and connectivity challenges.
• Design and implement VPN solutions (SSL, IPSEC), including Prisma Access remote access and branch connectivity scenarios.
• Collaborate with clients to understand business and security requirements and provide optimal SASE-based security solutions using Prisma Access.
• Configure and troubleshoot authentication flows (SAML, LDAP) and manage certificates (PKI) for Prisma Access and GlobalProtect deployments.
• Explain and apply concepts related to OSI layers, TCP/IP, IP subnetting, and routing protocols (BGP) in solutioning and troubleshooting Prisma Access service connections.
• Utilize Strata Cloud Manager and Panorama for centralized policy management, visibility, and operational workflows.
• Provide training and knowledge transfer on Prisma Access, Strata Cloud Manager, and Palo Alto firewall capabilities to customers and internal teams.

Required Skills and Experience:

• Strong understanding of OSI model, TCP/IP, and packet flow analysis.
• Hands-on experience with Palo Alto NGFWs and Prisma Access, including GlobalProtect VPN and centralized management via Panorama / Strata Cloud Manager.
• In-depth knowledge of Prisma Access architecture, VPN technologies (SSL, IPSEC), NAT, and QoS.
• Proficiency in troubleshooting using Wireshark, Prisma Access logs, and Palo Alto diagnostic tools.
• Expertise in SAML and LDAP authentication flows for cloud and remote access security.
• Solid understanding of DNS, HTTP, SSL/TLS, FTP, and cloud networking fundamentals.
• Strong logical and systematic troubleshooting skills across hybrid and cloud environments.
• Ability to design, implement, and manage secure, scalable SASE and firewall solutions in complex enterprise environments.