Professional Services Consultant - SASE

Company Description

Our Mission

At Palo Alto Networks® everything starts and ends with our mission:

Being the cybersecurity partner of choice, protecting our digital way of life.
Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and we’re looking for innovators who are as committed to shaping the future of cybersecurity as we are.

Who We Are

We take our mission of protecting the digital way of life seriously. We are relentless in protecting our customers and we believe that the unique ideas of every member of our team contributes to our collective success. Our values were crowdsourced by employees and are brought to life through each of us everyday - from disruptive innovation and collaboration, to execution. From showing up for each other with integrity to creating an environment where we all feel included.

As a member of our team, you will be shaping the future of cybersecurity. We work fast, value ongoing learning, and we respect each employee as a unique individual. Knowing we all have different needs, our development and personal wellbeing programs are designed to give you choice in how you are supported. This includes our FLEXBenefits wellbeing spending account with over 1,000 eligible items selected by employees, our mental and financial health resources, and our personalized learning opportunities - just to name a few!

Job Description

Your Career 

As a Professional Services Consultant (SASE), you’ll get into the details of our platform. You will push the buttons, flip the levers, turn the knobs. You do not shy away from difficult challenges as it relates to cybersecurity, implementations, and integrations. You are the technical authority and will interact directly with our customers to help them secure their digital environments. The customers are counting on you to perform this work and train their staff. And while experience on the company’s platform is desired, even more important is having a solid foundation in networking and security technologies combined with excellent communication skills. 

In fact, extensive experience with a competitor’s technology can play to your advantage. Many of the opportunities involve a client migrating to our platform for the first time, so understanding the nuances of that technology will enable you to be a better Palo Alto Networks consultant. And don't worry, we will send you to our Professional Services Academy to prepare you for the role, so you are experienced with our suite of services and products before you first meet the customer. 

Your Impact

The Professional Services Consultant (SASE) is an expert with a strong understanding of network security, Palo Alto Networks firewalls, GlobalProtect, Prisma Access and Prisma Access Browser. The Professional Services Consultant knows how to implement, optimize, and operate SASE Platforms. This is a highly technical role with a focus on large scale Prisma Access (PA) and Prisma Access Browser (PAB) deployments. The Professional Services Consultant (SASE) will develop, maintain and leverage expertise on SASE Platforms and the relevant tools that can be used to optimize the deployment and operation of the Platforms. The consultant needs to be familiar with Prisma Access and how it integrates with the Prisma Access Browser.

• Migrate customers from legacy remote access technologies to Palo Alto Networks SASE platforms

• Identify, design, and implement solutions to improve performance, reliability, and security of Prisma Access and Prisma Access Browser deployments

• Build custom security policies and application signatures, configured for our client’s needs

• Progress and uphold expertise in deploying advanced Palo Alto Networks features and functionality

• Provide after hours and weekend on-call support, as needed, to support maintenance activities

• Analyze logs and events from the solution to perform initial troubleshooting and issue identification

• Work with our Technical Assistance Center to troubleshoot and diagnose support cases

• Maintain the Company's solution and provide mentorship on code upgrades and best practices

• Ensure client needs are met and deliverables produced on time according to specified project deliverables and scope

• Drive customer satisfaction by partnering closely with Project Management and other teams to meet high CSAT scores and strong response rates

• Act as a key escalation point for complex technical and customer-facing issues, providing clear resolution paths and stakeholder communication

• Ensure the highest levels of client satisfaction by delivering consistent, high-quality technical results

• Drive project completion on time and ensure alignment with strategic business objectives 

• Travel is required in the scope of your duties.  It can be heavy but we believe in a work/life balance and will do our best to ensure project travel is minimized when possible

Qualifications

Your Experience

• 5+ years of remote user access technologies, including IPSec VPN, SSL VPN, Explicit Proxy, ZTNA

• Tunneling protocols such as SSL/TLS, IPSec, GRE

• Authentication methodologies, including: 2FA, SAML, RADIUS, LDAP, TACACS, Certificates

• Directory Services, including: OKTA, Active Directory, Azure ADFS, Ping, EntraID, OneLogin

• Strong Routing Skills, including: BGP, Redistribution to other routing protocols, Static Routing, Traffic Steering, PBF

• Next-Generation Firewall capabilities, configuration, and deployment. Including Panorama, User-ID, App-ID, Threat Prevention, URL Filtering, CASB, DLP, SSL Decryption

• Experience deploying and configuring SD-WAN technologies, preferably Prisma SD-WAN (Formerly CloudGenix) and PanOS SD-WAN

• Strong familiarity with certificates (Public, Private) and PKI

• Experience with managing commercial browsers (Chrome, Edge, Brave) and preferably competitor enterprise browsers (Island)

• Browser features (Shortcuts/Bookmarks, Developer Tools, Browser Extensions, Browsing History, Cookies)

• Understanding endpoint management solutions (Microsoft Intune, Jamf, VMware Workspace ONE)

• Scripting knowledge (PowerShell, Bash, Python) for automating tasks

• Experience identifying and executing on opportunities where automation can be used to optimize the deployment and operation of Palo Alto Networks SASE products in on-premise, and public cloud models

• Ability to work within small creative teams as well as cross-functional teams

• Excellent written and verbal communication skills

• BS in Computer Science or equivalent education/training/experience

Additional Information

The Team

Our professional services team is critical to our success and mission. As part of this team, you enable customer success by providing support to clients post-sale. Our dedication to our customers doesn’t stop once they sign – it evolves.

As threats and technology evolve, we stay in step to accomplish our mission. You’ll be involved in implementing new products, transitioning from old products to new, and will fix integrations and critical issues as they are raised. But you won’t wait for them to be raised, you’ll seek them out, too. We fix and identify technical problems, with a pointed focus of providing the best customer support in the industry.

Compensation Disclosure

The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/commissioned roles) is expected to be between $126000 - $172000/YR. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found here.

Our Commitment

We’re problem solvers that take risks and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together.

We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at  accommodations@paloaltonetworks.com.

Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.

All your information will be kept confidential according to EEO guidelines.