Staff Professional Service Consultant - SASE & Prisma Access

Jobs Paloaltonetworks; Bengaluru; On-site; INR 3,000,000 - 6,000,000; Full time

Job summary

Palo Alto Networks in Bengaluru seeks a Staff Professional Service Consultant to lead architecture and deployment of SASE solutions, focusing on Prisma Access. You will advise enterprise clients on Zero Trust transformations and mentor technical teams.

You will drive design, implementation, and integration efforts across cloud and on‑premises environments, partnering with executives and engineers to deliver secure, scalable networks.

Qualifications

• 8+ years in enterprise networking and security.
• 4+ years with Prisma Access/SASE Platform and Prisma SD‑WAN.
• Deep understanding of routing (BGP) and enterprise WANs.
• Strong experience with Panorama and Strata Cloud Manager for centralized SASE policy.
• Extensive experience with IPsec, SSL/TLS decryption, GlobalProtect, and cloud networking (AWS/Azure/GCP).
• Excellent communication and ability to present complex concepts to diverse stakeholders.

Responsibilities

• Lead high-level and low-level design of large-scale SASE architectures.
• Serve as primary technical advisor guiding executives and network architects through ZTNA transformations.
• Conduct capability assessments and scoping workshops to align requirements with secure solutions.
• Design traffic steering, routing and HA for hybrid/multi-cloud environments.
• Oversee end-to-end deployment of Prisma Access, SWG, CASB, and FWaaS.
• Integrate SASE solutions with IdPs via SAML/SSO (Okta, Azure AD, Ping).
• Mentor consultants and develop deployment templates and automation scripts.

Skills

Enterprise networking

Prisma Access

SASE Platform

BGP

Panorama

IPsec

SSL/TLS decryption

Cloud networking

Communication

Tools

Terraform

Ansible

Python APIs

Job description

Our Mission

At Palo Alto Networks® we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place.

Who We Are

In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us!

We believe collaboration thrives in person. That’s why most of our teams work from the office full time, with flexibility when it’s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes.

Job Summary

We are seeking a strategic Staff Professional Service Consultant to lead the architecture and deployment of SASE solutions, focusing on Palo Alto Networks Prisma Access/ SASE Platform. You will serve as a trusted advisor to enterprise clients, driving network security transformations and Zero Trust initiatives while mentoring technical teams.

Key Responsibilities

Architecture & Strategic Consulting

• Lead the high-level and low-level design (HLD/LLD) of large-scale, global SASE architectures using Palo Alto Networks Prisma Access/ SASE Platform
• Serve as the primary technical authority and trusted advisor for enterprise clients, guiding C-level executives and network architects through Zero Trust Network Access (ZTNA) transformations
• Conduct comprehensive capability assessments, scoping workshops, and whiteboard sessions to align business requirements with secure, scalable technical solutions
• Design robust traffic steering, routing, and high-availability frameworks for complex hybrid-cloud and multi-cloud environments

Implementation & Deployment Leadership

• Oversee and execute the end-to-end deployment of Prisma Access, including Cloud Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), and Firewall as a Service (FWaaS)
• Integrate SASE solutions with enterprise Identity Providers (IdP) such as Okta, Azure AD, or Ping Identity using SAML/SSO for seamless user authentication
• Manage complex migrations from legacy VPNs and on-premises proxy solutions to cloud-native Prisma Access environments

Technical Escalation & Team Mentorship

• Act as the highest point of technical escalation for complex troubleshooting involving routing (BGP, OSPF), IPsec/SSL VPN tunnels, and performance degradation
• Mentor and provide technical guidance to senior and junior consultants, fostering a culture of continuous learning and technical excellence
• Develop, standardize, and maintain deployment templates, best practice documentation, and automation scripts to streamline future service deliveries

Qualifications

Required Expertise

• 8+ years of progressive experience in enterprise networking and network security
• 4+ years of dedicated, hands‑on experience designing and implementing Palo Alto Networks Prisma Access/ SASE Platform and Prisma SD‑WAN solutions
• Deep understanding of routing protocols (particularly BGP) and enterprise WAN architectures
• Strong proficiency in Panorama and Strata Cloud Manager (SCM) for centralized SASE policy and device management
• Extensive experience with IPsec, SSL/TLS decryption, GlobalProtect, and public cloud networking (AWS, Azure, or GCP)
• Exceptional communication and presentation skills, with the proven ability to articulate complex technical concepts to both technical and non‑technical stakeholders

Preferred Qualifications

• SASE Certifications, industry relevant
• Advanced Palo Alto Networks certifications: PCNSE (Palo Alto Networks Certified Network Security Engineer), PCSAE (Palo Alto Networks Certified Security Automation Engineer), or PMSE (Prisma SASE Micro‑Credential)
• Experience utilizing infrastructure-as-code (IaC) and automation tools like Terraform, Ansible, or Python APIs for security provisioning
• Prior experience working in a Professional Services, Systems Integrator, or VAR (Value-Added Reseller) environment
• Deep understanding of broader Zero Trust frameworks and ecosystem integrations

Our Commitment

We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together.

We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at [e-mail].

Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation or other legally protected characteristics.

All your information will be kept confidential according to EEO guidelines.

Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.