Extended Expertise Consultant/Network Security Consultant

HCM Staffing and Consulting Group; Denver (CO); On-site; USD 90,000 - 140,000; Full time

Job summary

HCM Staffing and Consulting Group is seeking a Professional Services Consultant to deliver onsite or remote deployment and configuration of Palo Alto Networks solutions. You will act as the product's SME, guiding customers through best-practice deployment and security design in complex environments.

The role emphasizes hands-on troubleshooting, cross-functional collaboration, and training customer staff while expanding expertise across SASE, NGFW, and VPN technologies.

Qualifications

• Strong communication skills and ability to present to senior leaders.
• Solid networking knowledge and security technology fundamentals.
• Experience with firewall platforms and VPN / SSL technologies.
• Leadership and cross-functional collaboration in delivery projects.

Responsibilities

• Migrate customers to Palo Alto Networks platforms from legacy tech.
• Build security policies and application signatures for clients.
• Maintain knowledge on SASE, NGFW, and related services.
• Provide after-hours/on-call support as needed for maintenance.

Skills

Strong communication

Cross-functional collaboration

Troubleshooting

Leadership experience

Fast learner

Education

BS/MS in Computer Science or Electrical Engineering

PCNSE / CCNA / CCNP / CCIE

Tools

tcpdump

Wireshark

Palo Alto NGFW

VPN technologies

SSL Decryption

Windows Registries / Plist

Job description

The Professional Services Consultant is an integral part of our mission within our Professional Services team. As a Consultant, you will provide onsite and/or remote deployment and configuration expertise relating to Palo Alto Networks solutions. You will function as the product's Subject Matter Expert and will interact directly with the customer's personnel and project teams providing leadership, technical direction, interpretation, and alternatives to our best practice deployment methodology. This is a highly technical, hands‑on role and you will develop and maintain expertise level skill sets on our products and solutions deployed within the customer's environment.

As a Professional Services Consultant, youll get into the details of our platform. You will push the buttons, flip the levers, turn the knobs. You do not shy away from difficult challenges as it relates to cybersecurity, implementations, and integrations. You are the technical authority and will interact directly with our customers to help them secure their digital environments. The customers are counting on you to perform this work and train their staff. And while experience on the companys platform is desired, even more important is having a solid foundation in networking and security technologies. In fact, extensive experience with a competitors technology can play to your advantage. Many of the opportunities involve a client migrating to our platform for the first time, so understanding the nuances of that technology will enable you to be a better Networks consultant. And don't worry, we will send you to our Professional Services Academy to prepare you for the role, so you are experienced with our suite of services and products before you first meet the customer.

Your Impact

• Migrate customers from legacy firewall technologies to Palo Alto Networks platforms
• Build custom security policies and application signatures, configured for our clients needs
• Take every opportunity to maintain proficiency and increase the level of knowledge on Palo Alto Networks SASE products, software, and services
• Provide after hours and weekend on-call support as needed to support maintenance activities
• Analyze logs and events from the solution to perform initial troubleshooting and issue identificationWork with our Technical Assistance Center to troubleshoot and diagnose support cases
• Maintain the Company's solution and provide mentorship on code upgrades and best practices
• Ensure client needs are met and deliverables produced on time according to specified project deliverables and scope

Qualifications:

Must Have:

• Experience with Prisma Access
• Engineer (4+ years experience) in professional services or similar function with BS/MS in Computer Science, Electrical Engineering, Computer
• Engineering or a related technical field, or equivalent background
• Detailed technical experience in the installation, configuration, and operation of high-end firewall appliances
• Strong understanding of LAN and WAN networking protocols and technologies, including switching, routing, firewalls and security solutions
• Strong dynamic routing skills (BGP, OSPF, etc)
• Experience working with Remote Access VPN solutions, IPSEC, PKI & SSL, TCP/IP, Authentication Protocols (LDAP, RADIUS, SAML, etc.)
• Experience working with URL filtering
• Experience working with Proxy and SSL Decryption
• Experience working with Windows and MAC OS including(debugging, editing Windows Registries, Plist, etc.)
• Experience with one or more of these vendors: Palo Alto Networks NGFW, Cisco, Checkpoint, Juniper (Netscreen), Fortinet products, Symantec/ Blue Coat, Zscaler
• Good troubleshooting skills and ability to use tools like tcpdump & Wireshark
• Good written and verbal communication skills with confirmed ability to communicate to senior leaders and technical peers
• Demonstrate ability to work in a cross functional environment which involves coordination with different teams such as Sales/PreSales/Product Management/Engineering.
• Attention to details, fast learner and excellent communication skills. Be able to communicate technical information in a simplified, easy to understand manner.
• Project leadership experience; ability to drive organizations and resources to complete required tasks in service of end goals
• Possess one of more of the following industry certifications: PCNSE, CCNA/CCNP/CCIE
• Application Delivery expertise L7 SLB / Global SLB / Traditional Link LB
• Application Performance Monitoring expertise Response time metrics, Application identification.
• Packet capture analysis / fault isolation and remediation
• In-depth knowledge and deployment experience of SD-WAN and Remote Access technologies.
• Network Security expertise (IPS/IDS, ZBFW, NGFW)
• Implementation of Legacy WAN solutions (MPLS, Leased Line, Frame Relay, Satellite, Internet VPN, ECMP, DMVPN)
• Demonstrable Virtualization experience (VMware/Microsoft/Citrix/Linux KVM)
• Desire to learn on your feet and thrive on the bleeding edge of networking.