Principal Network & Security Architect

Talentuch

About The Position

We are looking for a Principal Network & Security Architect to serve as the company's senior technical authority for enterprise SASE, SD-WAN, and cloud security transformation projects. This person will lead complex, large-scale Palo Alto Networks Prisma deployments, including environments with thousands of mobile users, hundreds of branch locations, next-generation firewalls, multi-cloud infrastructures (AWS and OCI), Megaport connectivity, and migrations from legacy SD-WAN platforms. The architect will own the entire technical lifecycle of each engagement—from discovery and solution design through implementation, migration, testing, and final cutover—while working alongside a dedicated project team. The role also includes providing technical consulting to customers and acting as the primary technical decision-maker throughout the engagement.

Requirements

12+ years of experience in enterprise networking and cybersecurity.
At least 5 years of hands-on experience designing and deploying large-scale SASE solutions.
Extensive expertise with Palo Alto Networks technologies, including Prisma Access, Prisma SD-WAN (CloudGenix), Strata Cloud Manager, VM-Series, PA-Series NGFW, GlobalProtect, Cloud Identity Engine, ADEM, and CASB-X.
Proven experience leading migrations from Zscaler (ZIA/ZPA) and legacy SD-WAN platforms such as SilverPeak/EdgeConnect, Cisco Viptela, or Fortinet SD-WAN.
Strong networking and security knowledge, including eBGP, iBGP, OSPF, IPsec, Zero Trust architecture, segmentation, DLP, CASB, Quality of Service (CoS), and all OSI networking layers.
Hands-on experience with AWS, OCI, Azure, Megaport, AWS Direct Connect, and OCI FastConnect.
Demonstrated ability to independently deliver complete Prisma implementations without relying on vendor professional services or subcontractors.
Excellent written and verbal communication skills, with the ability to communicate effectively with engineers, CIOs, and CISOs.
Strong organizational and time management skills, with the ability to manage multiple projects simultaneously and perform effectively under pressure.
Willingness to participate in after-hours migration windows and occasional travel when required.

Nice To Haves

Palo Alto Networks certifications, such as PCNSE, PCSAE, PCCSE, or equivalent.
Additional cloud or networking certifications (Cloud CSP, NaaS Networking Specialty).
Previous experience working for Palo Alto Networks, WWT, Optiv, AHEAD, or another Tier-1 SASE integrator.
Experience with OT/IoT microsegmentation projects.

Responsibilities

Lead the architecture and delivery of enterprise Prisma SASE and Prisma SD-WAN solutions, including Strata Cloud Manager, Cloud Identity Engine, Prisma Access, Prisma Browser, ADEM, CASB-X, VM-Series firewalls, PA-Series NGFWs, microsegmentation, and Prisma SD-WAN branch deployments.
Serve as the technical lead for new customer implementations, managing all phases from project kickoff through successful completion.
Produce and maintain technical documentation, including High-Level Designs (HLDs), Low-Level Designs (LLDs), implementation plans, as-built documentation, failover testing results, and cutover runbooks.
Design, implement, and validate cloud connectivity solutions using Megaport, AWS Direct Connect, OCI FastConnect, BGP routing, and secure cloud interconnects.
Lead migrations from Zscaler (ZIA/ZPA) and legacy SD-WAN platforms to Prisma Access and Prisma SD-WAN while ensuring minimal business disruption and maintaining rollback capabilities.
Facilitate customer workshops, discovery sessions, design reviews, project kickoffs, cutovers, and executive presentations, while serving as the escalation point for technical issues and vendor-related challenges.
Support Sales Engineering by providing technical estimates, Statements of Work (SOW), Change Order input, and peer reviews.
Mentor engineering team members, promote knowledge sharing, and develop reusable design standards for future SASE engagements.
Ensure compliance with change management processes, documentation standards, Autotask ticketing, post-mortem reviews, and customer acceptance procedures.
Help establish and mature our security consulting practice by developing scalable methodologies and best practices for SASE, NGFW, Zero Trust, and related security engagements.