Network Security Engineer - SASE Implementation (New York)

Job Title: SASE Implementation Engineer – Palo Alto Prisma Access

Location: New York, NY

Work Arrangement: Hybrid – Minimum 2 days onsite per week

Duration: 12-month contract

Job Description

We are seeking an experienced SASE Implementation Engineer – Specialist Level III to lead the deployment, configuration, integration, and implementation of Palo Alto Networks Prisma Access. The ideal candidate will have strong hands-on expertise in network security engineering, secure remote access, cloud-delivered security solutions, and enterprise network modernization.

The selected candidate will be responsible for the end-to-end technical implementation lifecycle, including architecture validation, configuration, migration planning, integration, testing, troubleshooting, production deployment, and operational handoff. This role requires proven experience delivering at least one completed production SASE or enterprise network-security implementation as a technical lead or primary implementation engineer.

Key Responsibilities

• Lead the technical implementation of Palo Alto Networks Prisma Access, including architecture support, configuration, integration, migration, testing, and production readiness.
• Configure, administer, and troubleshoot Prisma Access using Strata Cloud Manager.
• Implement and support secure connectivity for mobile users, remote networks, and service connections.
• Work with PAN-OS, Panorama, GlobalProtect, routing, VPNs, authentication, security policies, logging, monitoring, and resilient network architectures.
• Plan and execute migration activities, including architecture validation, integration testing, defect resolution, cutover, and production validation.
• Troubleshoot complex network-security issues and coordinate resolution with infrastructure, networking, security, vendor, and application teams.
• Use automation tools and scripting languages such as Python, PowerShell, Ansible, Terraform, APIs, and Git to streamline configuration, deployment, testing, and validation.
• Monitor and validate system performance, connectivity, security policies, and implementation outcomes.
• Coordinate technical dependencies, risks, issues, change management, implementation schedules, and status reporting.
• Develop and maintain architecture diagrams, configuration standards, migration procedures, test documentation, troubleshooting guides, and operational runbooks.
• Support production transition, operational handoff, knowledge transfer, and technical training for internal teams.
• Collaborate with cross-functional technical teams and stakeholders to ensure successful implementation and adoption.

Mandatory Qualifications

• Demonstrated experience leading or serving as the primary implementation engineer for at least one completed production SASE or enterprise network-security implementation.
• Hands-on experience deploying, configuring, administering, and troubleshooting Palo Alto Networks Prisma Access through Strata Cloud Manager .
• Strong network-security engineering experience with PAN-OS, Panorama, GlobalProtect, routing, VPNs, authentication, security policies, logging, and monitoring.
• Experience with the complete implementation lifecycle, including architecture validation, migration planning, integration, test execution, defect resolution, production readiness, cutover, and operational handoff.
• Experience using APIs, Python, PowerShell, Ansible, Terraform, Git, or comparable tools to automate configuration, validation, integration, reporting, or deployment tasks.
• Experience managing technical dependencies, risks, issues, change control, stakeholder coordination, and implementation status reporting.
• Ability to create technical documentation, including architecture diagrams, configuration guides, migration procedures, test evidence, troubleshooting guides, and operational runbooks.
• Ability to provide project-specific evidence of implementation responsibilities and production outcomes, along with a client or employer reference for the qualifying implementation.

Preferred Qualifications

• Experience supporting large enterprise network-security modernization initiatives.
• Experience with Prisma Access Autonomous Digital Experience Management (ADEM).
• Familiarity with Splunk or Microsoft Sentinel for security monitoring and log analysis.
• Experience with Wireshark and network/VPN diagnostic tools.
• Experience with ServiceNow, Microsoft Project, Microsoft Visio, Microsoft Teams, and SharePoint.
• Current Palo Alto Networks, networking, cybersecurity, or project management certifications.
• Experience mentoring technical teams and providing knowledge transfer to operations personnel.