SASE Implementation Engineer

Job Description

REQUIREMENT SUMMARY

\n

- Role: SASE Implementation Engineer – Specialist Level III

\n

- End Client: CUNY – Computing and Information Services

\n

- Location: 395 Hudson Street, 6th Floor, New York, NY 10014 (Hybrid: minimum 2 days onsite per week, rest remote)

\n

- Positions: 1

\n

- Duration: 12 months

\n

- Anticipated Start: Around November 4, 2026

\n

- Hours: 8 AM – 5 PM EST, 40 hours/week

\n

\n

PROJECT OVERVIEW

\n

CUNY is deploying Palo Alto Networks Prisma Access to strengthen secure remote connectivity and modernize its network security architecture. The engineer will lead end-to-end technical delivery: architecture support, configuration, integration, migration, testing, troubleshooting, production validation, operational transition and adoption. The role involves coordinating with central IT, vendors and stakeholders across 25 colleges.

\n

\n

KEY RESPONSIBILITIES

\n

\n
• - Lead Prisma Access architecture, configuration, integration, migration, testing and production readiness
\n
• - Coordinate implementation across infrastructure, network, security and vendor teams
\n
• - Analyze and troubleshoot technical issues; manage resolution and escalation
\n
• - Prepare architecture/configuration documentation, procedures, status reports and executive updates
\n
• - Drive transition to operations, knowledge transfer and training for CUNY staff
\n

\n

\n

TECHNICAL ENVIRONMENT

\n

Prisma Access, Strata Cloud Manager, Panorama, PAN-OS (GUI and CLI), GlobalProtect, Prisma Access ADEM, routing/VPN diagnostic tools, Wireshark, Splunk or Microsoft Sentinel, ServiceNow, MS Project, Visio, PowerShell, Python, Ansible, Terraform, Git, Teams, SharePoint.

\n

\n

MANDATORY QUALIFICATIONS (Pass/Fail – the resume must clearly show each of these)

\n

1. Production implementation: At least one completed production SASE or enterprise network-security implementation as technical lead or primary implementation engineer, with platform, scope, responsibilities, outcome and a client/employer reference.

\n

2. Prisma Access: Hands-on deployment, configuration, administration and troubleshooting through Strata Cloud Manager, covering mobile users, remote networks, service connections and production validation.

\n

3. Network security: PAN-OS, Panorama, GlobalProtect, routing, VPN, authentication, security policy, logging, monitoring and HA/resilient network design.

\n

4. Deployment lifecycle: Architecture validation, migration planning, integration, testing, defect resolution, production readiness, cutover and operational handoff.

\n

5. Automation: Use of APIs, PowerShell, Python, Ansible, Terraform, Git or similar to automate configuration, validation, reporting or deployment.

\n

6. Technical program delivery: Ownership of integrated schedules, dependencies, risks, issues, change control, stakeholder coordination and status reporting.

\n

7. Documentation and knowledge transfer: Architecture diagrams, configuration standards, migration procedures, test evidence, runbooks and KT materials produced by the candidate.

\n

8. Certifications (scored, not pass/fail): Current Palo Alto Networks (e.g., PCNSE), networking, security or PM certifications are a strong plus; copies required if claimed.

\n

\n

WHAT TO SUBMIT

\n

- Updated resume (tailored to the mandatory qualifications above)

\n

- Short project narrative for the primary Prisma Access/SASE implementation

\n

- Copies of certifications claimed

\n

- Two professional references (at least one client/employer from the cited implementation)

\n

- Candidate full name, current location, work authorization, availability/notice period

\n

- Confirmation the candidate can work onsite at 395 Hudson St, NYC at least 2 days a week

\n

- Best all-inclusive hourly rate

\n

- Candidate must be willing to undergo background screening as directed by CUNY