Network Security Architect - Palo Alto Prisma SD-WAN (ION), AWS, PCNSA / PCNSE

Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!; Quebec; On-site; CAD 120,000 - 160,000; Full time

Job summary

Astra-North Infoteck Inc. is seeking a Network Security Architect to design and implement Palo Alto Prisma SD-WAN (ION) architectures across AWS and on-prem/remote sites in Canada. The role requires strong expertise in cloud networking, security policy design, and SD-WAN HA.

The candidate will develop high/low level designs, migration runbooks, and lead customer workshops to ensure secure, scalable connectivity across cloud and branch environments.

Qualifications

• Experience designing and deploying Prisma SD-WAN architectures in AWS and multi-region data centers.
• Strong understanding of cloud networking, security policies, and segmentation.
• Ability to produce high/low level designs and migration playbooks.
• Experience with cloud-to-branch and branch-to-cloud connectivity.

Responsibilities

• Design end-to-end Palo Alto Prisma SD-WAN architecture for AWS and sites.
• Develop HLD/LLD documentation and migration runbooks.
• Onboard Prisma SD-WAN ION appliances in AWS and ensure HA multi-region resilience.
• Define routing strategies using BGP, static routes, and Direct Connect integration.
• Lead customer workshops and present technical solutions.

Skills

Palo Alto SD-WAN

Prisma Access

BGP

OSPF

Static Routing

ECMP

SD-WAN HA

MPLS

DIA

Broadband Connectivity

Traffic Engineering

AWS VPC

Transit Gateway

Direct Connect

Route Tables

Security Groups

NACLs

AWS Networking Design

Zero Trust

SASE/SSE

IAM

Tools

HLD/LLD Docs

MOPs & Runbooks

Job description

Role: Network Security Architect - Palo Alto Prisma SD-WAN (ION), AWS

Remote - Canada

Required Skills

• Must know Palo Alto Prisma SD-WAN (ION) - on prime and AWS Strata Cloud Manager (SCM)
• Prisma Access
• BGP
• OSPF
• Static Routing
• ECMP
• SD-WAN High Availability (HA)
• MPLS
• DIA
• Broadband Connectivity
• Traffic Engineering and Application-Aware Routing

Cloud

• AWS VPC
• Transit Gateway
• Direct Connect
• Route Tables
• Security Groups
• NACLs
• AWS Networking Design

Security

• Zero Trust Architecture
• SASE/SSE
• Segmentation and Security Policies
• Identity and Access Management
• Design end-to-end Palo Alto Prisma SD-WAN architecture for AWS, branch locations, data centers, and cloud environments.
• Develop HLD and LLD documentation for SD-WAN deployments.
• Design AWS-hosted ION Virtual Appliance architecture including HA clusters and multi-region resiliency.
• Define routing strategies using BGP, static routes, route redistribution, and cloud connectivity models.
• Deploy and onboard Prisma SD-WAN ION Virtual Appliances in AWS.
• Integrate AWS VPCs, Transit Gateway, and Direct Connect with Prisma SD-WAN fabric.
• Configure cloud-to-branch and branch-to-cloud connectivity.
• Design secure connectivity for applications hosted in AWS.

SD-WAN Implementation

• Configure ION devices, sites, WAN circuits, and VPN fabrics.
• Implement application-aware policies, QoS, and path selection.
• Configure WAN overlays and service links.
• Execute greenfield and brownfield migrations.
• Design active/active and active/standby ION HA clusters.
• Plan failover, redundancy, and disaster recovery scenarios.
• Validate AWS availability zone resilience and WAN failover mechanisms.

Integrate Prisma Access and Palo Alto SD-WAN & NGFW

• Implement segmentation, secure zones, and security policies.
• Ensure compliance with enterprise security standards.
• Lead migration from traditional WAN or third-party SD-WAN solutions to Prisma SD-WAN.
• Execute cloud migration and data center exit initiatives.
• Perform pilot deployments and production cutovers.
• Diagnose routing, tunnel, and application performance issues.
• Work with Palo Alto TAC for critical incidents and platform bugs.
• Optimize application experience and network performance.
• Prepare HLD, LLD, MOP, migration runbooks, rollback plans, and SOPs.
• Participate in architecture reviews and customer workshops.
• Present technical solutions to customers and stakeholders.