SASE/SSE Security Consultant — Zero Trust Expert

Remote; San Francisco (CA); Hybrid; USD 140,000 - 180,000; Full time

Job summary

AHEAD is seeking a Technical Consultant to deliver SASE and SSE engagements for enterprise clients. You will independently lead remote and on-site deployment workstreams across Zscaler, Palo Alto Prisma Access, Cisco Secure Access, and Netskope, configuring Zero Trust architectures and providing knowledge transfer to client teams.

Responsibilities include hands-on configuration, testing, documentation, and mentoring junior engineers, with opportunities for advancement to Senior Technical

Qualifications

• 3 to 5 years in network security or security engineering
• Production experience with at least one SASE/SSE platform
• Understanding of Zero Trust architectures and related concepts
• Experience with identity providers (Okta, Entra ID), SAML 2.0, SCIM
• Knowledge of routing protocols and traffic forwarding designs
• Ability to produce client-facing documentation
• Willingness to travel 25%

Responsibilities

• Lead remote and on-site SASE/SSE deployment workstreams per established design.
• Configure and validate ZIA, ZPA, Prisma Access, Cisco Secure Access, and Netskope platforms.
• Implement identity-based access controls and policy enforcement.
• Produce design and as-built documentation; mentor junior engineers.
• Perform platform health checks and day-2 operations tasks.
• Contribute to project milestones and risk/ scope management.

Skills

3-5 years experience in network sec

SASE/SSE platforms experience

Zero Trust concepts

Identity management integration

Routing & connectivity basics

Documentation skills

Travel willingness 25%

Tools

Zscaler ZIA/ZPA

Palo Alto Prisma Access

Cisco Secure Access

Netskope Security Cloud

Job description

AHEAD is seeking a Technical Consultant to deliver SASE and SSE engagements for enterprise clients. You will independently lead remote and on-site deployment workstreams across Zscaler, Palo Alto Prisma Access, Cisco Secure Access, and Netskope, configuring Zero Trust architectures and providing knowledge transfer to client teams.

Responsibilities include hands-on configuration, testing, documentation, and mentoring junior engineers, with opportunities for advancement to Senior Technical