Sr. Prisma Access Engineer

Sr. Prisma Access Engineer Remote

MatchPoint Solutions is a fast-growing, young, energetic global IT-Engineering services company with clients across the US. We provide technology solutions to various clients like Uber, Robinhood, Netflix, Airbnb, Google, Sephora, and more! More recently, we have expanded to working internationally in Canada, China, Ireland, UK, Brazil, and India. Through our culture of innovation, we inspire, build, and deliver business results, from idea to outcome. We keep our clients on the cutting edge of the latest technologies and provide solutions by using industry-specific best practices and expertise.

We are excited to be continuously expanding our team. If you are interested in this position, please send over your updated resume. We look forward to hearing from you!

Job Title: Sr. Prisma Access Engineer Remote 3months Rate: 90$ - 100$/hr on W2

Key Responsibilities:

• Lead end-to-end deployments of Prisma Access, including GlobalProtect agent-based and ZTNA 2.0 agentless access configurations
• Serve as the technical lead for Prisma Access implementations, owning delivery from architecture design through production rollout
• Design and implement:
  • Mobile user and remote access policies using GlobalProtect and Prisma Access tunnels
  • Security policy frameworks leveraging App-ID, User-ID, and Device-ID
  • ZTNA 2.0 private application access (agentless and agent-based)
  • DNS Security and Advanced Threat Prevention within the Prisma Access cloud
• Configure and manage Prisma Access infrastructure, including:
  • Service connections and remote network onboarding
  • Infrastructure settings, bandwidth allocation, and compute location selection
  • Integration with identity providers (Okta, Azure AD, SAML/SCIM)
• Integrate Prisma Access within the broader network architecture, including:
  • Prisma SD-WAN (where applicable) for unified SASE deployment
  • Strata Cloud Manager (SCM) for centralized policy management
  • Existing on-premises firewall infrastructure and Panorama environments
• Lead user population migrations from legacy VPN and perimeter-based remote access architectures to Prisma Access
• Troubleshoot complex issues related to:
  • GlobalProtect client connectivity, tunnel establishment, and agent behavior
  • Policy enforcement, App-ID classification, and traffic steering decisions
  • Latency, performance, and compute region optimization
• Provide technical leadership and mentorship to engineers on the team
• Interface with stakeholders, vendors, and customers to drive successful outcomes
• Develop documentation, runbooks, and deployment standards

Required Qualifications:

• 5–8+ years of experience in network security engineering with a focus on remote access and Zero Trust architectures
• Hands-on experience deploying and managing Prisma Access in production environments
• Strong experience with GlobalProtect, including:
  • Agent deployment and endpoint configuration
  • Split tunneling, pre-logon, and Always-On configurations
  • HIP-based policy enforcement and device posture assessment
• Deep understanding of:
  • ZTNA principles and Zero Trust architecture frameworks
  • SSL/TLS inspection, decryption policies, and certificate management
  • Identity-based access control and MFA integration
  • Security policy design using App-ID, User-ID, and URL Filtering
• Familiarity with Strata Cloud Manager (SCM) or Panorama for centralized policy management
• Working knowledge of networking fundamentals (routing, DNS, NAT, IPsec/SSL VPN)
• Proven ability to lead implementations or remote access workstreams
• Strong troubleshooting skills across distributed enterprise environments

Preferred Qualifications:

• Palo Alto Networks certifications: PCNSA, PCNSE, or PCSAE (Prisma Access Specialist)
• Experience with competing remote access and ZTNA platforms (Zscaler Private Access, Cisco AnyConnect, etc.) for competitive context
• Familiarity with Prisma SD-WAN as part of a unified SASE deployment
• Experience integrating Prisma Access with SIEM platforms or XDR solutions for visibility and logging
• Knowledge of endpoint security and device posture frameworks as they relate to ZTNA policy enforcement

MatchPoint Solutions provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.