Network Security & SASE Architect - Palo Alto Networks Senior Manager

Accenture OverviewWe are a global collective of innovators applying the New every day to improve the way the world works and lives. Help us show the world what’s possible as you partner with clients to unlock hidden value and deliver innovative solutions. Empowered with innovative tools, continuous learning, and a global community of diverse talent and perspectives, we drive success in a new business architecture that disrupts conventional practices. Our expertise spans 40+ industries across 120+ countries and impacts millions of lives every day. We turn ideas into reality.We AreAccenture Security helps organizations prepare, protect, detect, respond and recover along all points of the security lifecycle. Cybersecurity challenges are different for every business in every industry. Leveraging our global resources and advanced technologies, we create integrated, turnkey solutions tailored to our clients’ needs across their entire value chain. Whether we’re defending against known cyberattacks, detecting and responding to the unknown, or running an entire security operations center, we will help companies build cyber resilience to grow with confidence. Our team of the security sector’s brightest people use the coolest tech to out-hack the hackers and help clients build resilience from within. We blend risk strategy, digital identity, cyber defense, application security and managed service solutions to rethink the entire security lifecycle.You AreSecurity and Risk professionals develop and deliver solutions that protect enterprise systems, applications and data by establishing policies, practices and tools that prevent unauthorized access, use, disclosure, modification or disruption. A professional at this position level within Accenture has the following responsibilities:Provides solutions to complex business problems for area(s) of responsibility where analysis of situations requires an in depth knowledge of organizational objectives. Involved in setting strategic direction to establish near term goals for area of responsibility. Interacts with senior management levels at a client and/or within Accenture, which involves negotiating or influencing on significant matters. Has latitude in decision-making and determining objectives and approaches to critical assignments. Decisions have a lasting impact on area of responsibility with the potential to impact outside area of responsibility. Manages large teams and/or work efforts (if in an individual contributor role) at a client or within Accenture.We are looking for a Security Professional for our Security practice who is a recognized Palo Alto Networks network security architect. You have personally designed, deployed and troubleshot PAN-OS Next-Generation Firewalls, Prisma Access and Panorama / Strata Cloud Manager at enterprise scale, and you have grown into leading the sale, solutioning and delivery of network security transformation programs. You are equally credible whiteboarding a target-state architecture with a client’s network and security architects, leading a root-cause analysis on a production outage, and presenting the business case to the CISO or CIO.The Work (Key Responsibilities)Business leadership and growthOriginate, shape and sell network security, Zero Trust and SASE transformation programs built on Palo Alto Networks; lead proposal development, solution and effort estimation, commercial structuring and orals, and carry sales and delivery targets for your area of responsibility.Act as the trusted advisor to client CISOs, CIOs and heads of network and security; translate network security architecture choices into business outcomes, risk reduction and cost cases that executives can act on.Build and grow Accenture’s Palo Alto Networks network security capability: co-sell and co-deliver with Palo Alto Networks account, Solutions Consulting and channel teams, and develop offerings, reference architectures, estimating models and accelerators.Represent Accenture as an expert at industry conferences, partner events and client briefings, and publish points of view on NGFW modernization, SASE and Zero Trust.Architecture, solutioning and designOwn the end-to-end solution architecture for network security programs: current-state assessment, target-state design, roadmap, bill of materials, sizing and licensing across data center, campus, branch, public cloud and remote users.Lead high-level and low-level design (HLD/LLD) for Palo Alto Networks Next-Generation Firewall deployments (PA-Series, VM-Series, CN-Series and Cloud NGFW): zone and segmentation design, App-ID, User-ID and Content-ID policy design, SSL/TLS decryption, Cloud-Delivered Security Services (Advanced Threat Prevention, Advanced URL Filtering, Advanced WildFire, Advanced DNS Security), high availability and performance sizing.Architect Prisma Access (SASE/SSE) deployments: Mobile Users (GlobalProtect and explicit proxy), Remote Networks, Service Connections, traffic steering and routing, ZTNA, identity integration (Cloud Identity Engine, Okta, Microsoft Entra ID, SAML/SCIM), SaaS Security, Enterprise DLP, Prisma Browser (formerly Prisma Access Browser) and Autonomous Digital Experience Management (ADEM), including migrations from legacy VPN and on-premises proxy platforms.Define the management and operating model: Panorama design (device groups, templates and template stacks, log collectors, high availability) and Strata Cloud Manager for cloud-managed NGFW and Prisma Access, including Panorama to Strata Cloud Manager migration, policy optimization, best-practice assessment and AIOps adoption, plus Strata Logging Service and SIEM/XSIAM integration.Lead firewall consolidation and migration programs from Check Point, Cisco ASA/Firepower, Fortinet, Juniper and other platforms to Palo Alto Networks: policy rationalization and cleanup, object and rule migration tooling, cutover planning and rollback.Design the surrounding enterprise network: routing (BGP, OSPF), IPsec VPN and SD-WAN (Prisma SD-WAN, SD-WAN for NGFW), NAT, DNS, load balancing, hybrid and multi-cloud connectivity (AWS, Azure, GCP) and macro/micro-segmentation aligned to Zero Trust principles (NIST SP 800-207, CISA Zero Trust Maturity Model).Review and approve designs produced by the team; set design standards, naming conventions and security policy best practices.Delivery and operations leadershipLead delivery of multi-workstream programs across onshore and global delivery teams: plan, estimate, staff and manage scope, schedule, budget, risk and quality so client deliverables are produced on time and to Accenture project quality specifications.Serve as the highest point of technical escalation: lead root-cause analysis for complex issues across PAN-OS firewalls, Panorama / Strata Cloud Manager, GlobalProtect, Prisma Access, routing, IPsec tunnels, decryption, HA failover and performance degradation, using packet captures, session and flow analysis, global counters and the PAN-OS CLI.Lead the transition of clients into Accenture Network Managed Services: define runbooks, SLAs and KPIs, monitoring and change processes, and ensure a clean handover from build to run.Produce client-ready documentation: architecture decision records, HLD/LLD, migration and test plans, and executive readouts.Interpret the relevance of network security controls to legal, regulatory and framework requirements (NIST CSF and SP 800-53, ISO 27001, PCI DSS, HIPAA, SOX) within the designs you deliver.People and practice developmentBuild, lead and grow a team of network security architects and engineers: recruit, mentor, set Palo Alto Networks certification paths and run design reviews that raise the team’s technical bar.Develop reusable assets: deployment templates, automation (Terraform, Ansible, PAN-OS APIs), migration playbooks, lab environments and demos.Take initiative to communicate, interact and collaborate with Accenture cloud, network, SOC and identity teams so that all aspects of a client outcome are addressed.Here’s What You Need (Basic Qualifications)Minimum 10 years of experience in enterprise network and network security engineering, architecture or consulting, with progressively increasing technical and leadership responsibility and/or experience and knowledge of network security concepts and architectures around Zero Trust, Zero Trust Network Access (ZTNA), Security Service Edge and macro/micro-segmentationMinimum 5 years of hands-on experience designing, deploying and troubleshooting Palo Alto Networks Next-Generation Firewalls (PAN-OS) and/or firewalls in large, complex enterprise environments, including Panorama-managed estates (device groups, templates, log collection, high availability)Minimum 3 years of hands-on experience designing and deploying Prisma Access Minimum 1 year of hands-on experience with Strata Cloud Manager for cloud-managed NGFW and/or Prisma Access, including Panorama to Strata Cloud Manager migration or coexistenceMinimum 5 years of experience architecting enterprise networks and network security, including routing (BGP, OSPF), IPsec VPN, NAT, SD-WAN, DNS, segmentation and high-availability design, and leading advanced troubleshooting across LAN, WAN, data center and public cloud and/or Minimum 5 years of experience leading solution architecture and design for network security transformation programs (firewall migration and consolidation, segmentation, SASE and Zero Trust), including HLD/LLD, bill of materials and architecture governanceMinimum 5 years of managing teams of 5 or more resources and delivering projects using a standardized set of project management principlesMinimum 3 years of business development experience: shaping proposals, statements of work, estimates and pricing, and presenting solutions to client executivesBachelor’s degree or equivalent (minimum 12 years) work experience. (If Associate’s Degree, must have minimum 6 years work experience)Travel will be required for this role. The amount of travel will vary from 75 to 100% depending on business need and client requirementsBonus Points If You Have (Preferred Skills)Palo Alto Networks certifications: an active PCNSE (the exam retired July 31, 2025; certifications stay valid for two years), or the current role-based certifications such as Next-Generation Firewall Engineer, Next-Generation Firewall Analyst (Strata Cloud Manager focused), Security Service Edge Engineer, SD-WAN Engineer or Network Security ProfessionalTechnical writing and report generation (architecture and design documents, standards, executive readouts)Industry certifications such as CISSP, CCSP, CCNP or CCIE Security or Enterprise, GIAC (GDSA, GCIA), TOGAF or SABSAExperience with adjacent Palo Alto Networks products: Prisma SD-WAN and SD-WAN for NGFW, VM-Series and CN-Series, Cloud NGFW for AWS and Azure, Enterprise DLP, SaaS Security, IoT Security, Prisma Browser, ADEM, Strata Logging Service and Cortex XSIAM/XDR integrationMulti-vendor and competitive knowledge: Zscaler (ZIA/ZPA), Netskope, Cisco (ASA/Firepower, Secure Access, Umbrella), Fortinet, Check Point and Illumio/Guardicore, and experience with firewall migration toolingAutomation and infrastructure as code: Terraform (PAN-OS and Prisma Access providers), Ansible, Python, PAN-OS XML/REST APIs and Git-based change workflowsCloud networking and security: AWS (Transit Gateway, Gateway Load Balancer), Azure (Virtual WAN, hub-and-spoke), GCP, and cloud-native firewall servicesExperience operating, or transitioning clients into, managed network security services; ITIL familiaritySecurity frameworks and regulations: NIST SP 800-207, CISA Zero Trust Maturity Model, NIST CSF and SP 800-53, ISO 27001, PCI DSS, HIPAA, SOX and FedRAMPExperience in Identity and Access Management (Okta, Microsoft Entra ID, Ping Identity, Cloud Identity Engine) and in IT security testing (penetration testing, vulnerability and technical security assessments)Previous consulting, systems integrator or Palo Alto Networks Professional Services experience; practice or P&L management; familiarity with the Palo Alto Networks NextWave partner programPublished thought leadership or speaking experience at industry eventsCompensation at Accenture varies depending on a wide array of factors, which may include but are not limited to the specific office location, role, skill set, and level of experience. As required by local law, Accenture provides a reasonable range of compensation for roles that may be hired as set forth below.We anticipate this job posting will be posted until 12/12/2026.Accenture offers a market competitive suite of benefits including medical, dental, vision, life, and long-term disability coverage, a 401(k) plan, bonus opportunities, paid holidays, and paid time off. See more information on our benefits here:U.S. Employee Benefits | AccentureRole Location Annual Salary RangeCalifornia $132,500 to $338,300Colorado $132,500 to $292,200Connecticut $132,500 to $292,200District of Columbia $141,100 to $311,200Illinois $122,700 to $292,200Maine $112,900 to $249,000Maryland $132,500 to $292,200Massachusetts $132,500 to $311,200Minnesota $132,500 to $292,200New York $122,700 to $338,300New Jersey $141,100 to $338,300Ohio $122,700 to $270,600Virginia $122,700 to $311,200Washington $141,100 to $311,200Requesting an AccommodationAccenture is committed to providing equal employment opportunities for persons with disabilities or religious observances, including reasonable accommodation when needed. If you are hired by Accenture and require accommodation to perform the essential functions of your role, you will be asked to participate in our reasonable accommodation process. Accommodations made to facilitate the recruiting process are not a guarantee of future or continued accommodations once hired.If you would like to be considered for employment opportunities with Accenture and have accommodation needs such as for a disability or religious observance, please call us toll free at View phone number on click.appcast.io or send us anemailor speak with your recruiter.Equal Employment Opportunity StatementWe believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.For details, view a copy of the Accenture Equal Opportunity and Affirmative Action Policy StatementAccenture is an EEO and Affirmative Action Employer of Females/Minorities/Veterans/Individuals with Disabilities.Accenture is committed to providing veteran employment opportunities to our service men and women.Other Employment StatementsApplicants for employment in the US must have work authorization that does not now or in the future require sponsorship of a visa for employment authorization in the United States.Candidates who are currently employed by a client of Accenture or an affiliated Accenture business may not be eligible for consideration.Job candidates will not be obligated to disclose sealed or expunged records of conviction or arrest as part of the hiring process. Further, at Accenture a criminal conviction history is not an absolute bar to employment.The Company will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. Additionally, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the Company's legal duty to furnish information.California requires additional notifications for applicants and employees. If you are a California resident, live in or plan to work from Los Angeles County upon being hired for this position, pleaseclick herefor additional important information.Please read Accenture’sRecruiting and Hiring Statementfor more information on how we process your data during the Recruiting and Hiring process.