Professional Services Consultant-Prisma Access

Mandal Solutions LLC; United States; Remote; USD 120,000 - 160,000; Full time

Job summary

Mandal Solutions LLC is seeking a Security Consultant to design, implement, and troubleshoot advanced network security solutions using Palo Alto Networks NGFWs and Prisma Access. The role emphasizes cloud-delivered security, remote access VPNs, and hybrid cloud connectivity.

The ideal candidate will have hands-on experience with Palo Alto security platforms, strong networking fundamentals, and the ability to deliver scalable security architectures and operational guidance to customers and

Qualifications

• Hands-on experience with Palo Alto Networks security platforms.
• Expertise in cloud-delivered security, remote access VPNs, and enterprise firewall infrastructure.
• Ability to design scalable security architectures and troubleshoot complex issues.
• Experience with Prisma Access, GlobalProtect, Panorama, and Strata Cloud Manager.

Responsibilities

• Deploy, configure, and manage Palo Alto NGFWs and cloud-delivered security solutions including Prisma Access, GlobalProtect, Panorama, and Strata Cloud Manager.
• Design and maintain Prisma Access architectures for mobile users and remote networks.
• Implement scalable SASE solutions aligned with enterprise security requirements.
• Configure firewall policies, centralized policy management, and network security controls.
• Support end-to-end implementation and maintenance of firewall and cloud security infrastructures.
• Collaborate with customers and stakeholders to understand business requirements and security objectives.

Skills

Prisma Access

Palo Alto Networks NGFW

Network Security

SASE Architecture

GlobalProtect VPN

Panorama

Strata Cloud Manager

Education

Undergraduate: Any Graduate

Postgraduate: Any Postgraduate

Degree in CS/IT/Cybersecurity advantageous

Tools

Wireshark

Panorama

Strata Cloud Manager

GlobalProtect

Job description

Role Summary

The Security Consultant will be responsible for designing, implementing, configuring, and troubleshooting advanced network security solutions using Palo Alto Networks Next-Generation Firewalls (NGFW) and Secure Access Service Edge (SASE) technologies, with a primary focus on Prisma Access.

The ideal candidate will possess strong networking and security fundamentals, hands‑on experience with Palo Alto Networks security platforms, and expertise in cloud-delivered security, remote access VPNs, enterprise firewall infrastructure, and hybrid cloud connectivity.

The role requires the ability to design scalable security architectures, resolve complex network and security issues, collaborate with customers, and provide technical guidance to internal teams.

Key Responsibilities

A. Prisma Access and Network Security Implementation

• Deploy, configure, and manage Palo Alto Networks NGFWs and cloud-delivered security solutions, including Prisma Access, GlobalProtect, Panorama, and Strata Cloud Manager.


• Design, implement, and maintain Prisma Access architectures for mobile users, remote networks, and service connections.


• Implement scalable and secure SASE solutions aligned with enterprise security requirements.


• Configure and maintain firewall policies, security rules, centralized policy management, and network security controls.


• Support end‑to‑end implementation and maintenance of enterprise firewall and cloud security infrastructures.

B. Network Architecture and Connectivity

• Design and implement remote access and site‑to‑site VPN solutions using SSL/TLS and IPsec technologies.


• Configure and troubleshoot IPsec tunnels, routing, Network Address Translation (NAT), Quality of Service (QoS), and packet flows.


• Apply networking fundamentals, including the OSI model, TCP/IP, IP subnetting, DNS, and routing protocols such as BGP.


• Troubleshoot connectivity across on‑premises, cloud, branch office, and remote user environments.


• Design secure connectivity between enterprise networks, cloud environments, and Prisma Access service connections.

C. Advanced Troubleshooting and Diagnostics

• Diagnose and resolve complex network, firewall, VPN, and security connectivity issues.


• Analyze packet captures, network traffic, firewall logs, and Prisma Access diagnostic information.


• Use Wireshark and Palo Alto Networks diagnostic tools to identify packet drops, routing issues, NAT problems, latency, and session failures.


• Troubleshoot application connectivity involving DNS, HTTP/HTTPS, SSL/TLS, FTP, and other network protocols.


• Perform root cause analysis and implement corrective and preventive measures for recurring incidents.

D. Authentication, Certificates, and Access Security

• Configure and troubleshoot authentication and identity integration using SAML and LDAP.


• Implement and manage certificate‑based security, Public Key Infrastructure (PKI), and certificate lifecycle requirements.


• Configure and troubleshoot authentication flows for Prisma Access and GlobalProtect deployments.


• Ensure secure remote access through appropriate authentication, authorization, and access control policies.

E. Centralized Management and Operations

• Use Panorama and Strata Cloud Manager for centralized configuration, security policy management, monitoring, and operational workflows.


• Monitor firewall and Prisma Access logs to identify security events, connectivity issues, and policy violations.


• Maintain consistent security configurations and operational standards across distributed environments.


• Support ongoing platform maintenance, configuration changes, and security policy optimization.

F. Customer Engagement and Technical Leadership

• Collaborate with customers and stakeholders to understand business requirements, network architecture, and security objectives.


• Recommend and implement suitable SASE and network security solutions using Prisma Access.


• Provide technical guidance, knowledge transfer, and training on Prisma Access, GlobalProtect, Strata Cloud Manager, Panorama, and Palo Alto Networks firewalls.


• Document solution designs, configurations, troubleshooting procedures, and operational best practices.


• Support technical escalations and coordinate with relevant teams to resolve complex customer issues.

Required Skills and Experience

A. Core Networking Skills

• Strong understanding of the OSI model, TCP/IP, packet flow, and network troubleshooting.


• Knowledge of IP addressing, subnetting, routing, switching, and BGP.


• Hands‑on experience with DNS, HTTP/HTTPS, SSL/TLS, FTP, NAT, and QoS.


• Understanding of cloud networking and hybrid network connectivity.

B. Palo Alto Networks and Prisma Access

• Hands‑on experience with Palo Alto Networks Next‑Generation Firewalls.


• Practical experience implementing and managing Prisma Access.


• Experience with GlobalProtect VPN for remote user connectivity.


• Knowledge of Panorama and/or Strata Cloud Manager for centralized management.


• Understanding of SASE architecture, cloud‑delivered security, remote networks, mobile users, and service connections.

C. VPN and Security Technologies

• Strong knowledge of IPsec VPN and SSL/TLS‑based remote access technologies.


• Experience configuring and troubleshooting VPN tunnels and secure network connectivity.


• Understanding of firewall security policies, NAT, traffic inspection, and access control.


• Knowledge of SAML, LDAP, PKI, certificates, and authentication troubleshooting.

D. Troubleshooting and Diagnostic Tools

• Proficiency in Wireshark and packet capture analysis.


• Experience analyzing firewall traffic logs, system logs, and Prisma Access diagnostics.


• Ability to troubleshoot routing, packet drops, session failures, authentication errors, and application connectivity issues.


• Strong analytical, logical, and systematic problem‑solving skills.

E. Cloud Security and Solution Design

• Understanding of cloud networking and enterprise security architectures.


• Ability to design, implement, and maintain secure, scalable SASE and firewall solutions.


• Experience troubleshooting connectivity across on‑premises and cloud environments.


• Ability to translate business and technical requirements into practical security solutions.

Preferred Skills

• Palo Alto Networks certifications such as PCNSE, PCNSA, or Palo Alto Networks SSE/Prisma Access certifications.


• Experience with complex enterprise‑scale Prisma Access deployments.


• Experience migrating or integrating existing network security infrastructure with SASE solutions.


• Palo Alto Networks certifications relevant to firewall and network security technologies.


• Experience leading technical implementations, customer workshops, or knowledge‑transfer sessions.


• Strong technical documentation, communication, and stakeholder‑management skills.

Education

• Undergraduate: Any Graduate


• Postgraduate: Any Postgraduate

A degree in Computer Science, Information Technology, Networking, Cybersecurity, or a related field is advantageous.

Key Skills and Keywords

Primary Skills

• Prisma Access


• Palo Alto Networks NGFW


• Network Security


• SASE Architecture


• GlobalProtect VPN


• Panorama


• Strata Cloud Manager

Networking and Connectivity

• TCP/IP


• OSI ModelIP Subnetting


• BGP Routing


• IPsec VPN


• SSL/TLS


• NAT


• QoS


• DNS


• Cloud Networking


• Remote Access

Identity and Security

• SAML


• LDAP


• PKI


• Certificate Management


• Security Policies


• Firewall Configuration

Troubleshooting and Operations

• Wireshark


• Packet Capture Analysis


• Network Diagnostics


• Root Cause Analysis


• Troubleshooting


• Policy Management


• Implementation and Maintenance

Ideal Candidate Profile

The ideal candidate is a hands‑on network security professional with strong expertise in Palo Alto Networks technologies and practical experience designing, implementing, and troubleshooting Prisma Access solutions. The candidate should be capable of independently handling complex technical issues, developing secure enterprise architectures, engaging with customers, and providing technical leadership across implementation and operational activities.