Professional Service Staff Consultant

Palo Alto Networks•Seattle, WA

1d•$140,000 - $192,500•Remote

About The Position

Our Mission At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place. Who We Are In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us! This role is remote, but distance is no barrier to impact. Our hybrid teams collaborate across geographies to solve big problems, stay close to our customers, and grow together. You will be part of a culture that values trust, accountability, and shared success where your work truly matters. Job Summary As a Professional Services Consultant focused on SASE, you will serve as a key technical authority and advisory lead helping enterprise customers transform their cloud security architecture. In this role, you will bridge the gap between high-level strategy and deep technical execution—driving the hands-on implementation, custom configuration, and architectural integration of our cloud-delivered security solutions. You do not shy away from complex engineering challenges and thrive when solving intricate routing, security policy, and hybrid-cloud integration issues. You will act as the trusted technical face of Palo Alto Networks, interacting directly with enterprise clients to secure their digital environments and empower their internal teams. While deep platform experience is highly desired, we place immense value on a foundational mastery of networking and security principles, backed by exceptional communication skills. A strong background in migrating clients away from competitor technologies is a distinct advantage. To ensure your success, you will be supported by our Professional Services Academy, equips you with deep product expertise before your first customer engagement.

Requirements

5+ years of customer-facing experience in a technical consulting, Professional Services, or Solutions Architecture role, with a proven track record of managing enterprise project scopes and client relationships.
2–3 years of hands-on experience in the architectural design, deployment, and optimization of cloud-delivered security architectures (Prisma Access, Prisma SD-WAN, Prisma Browser, and Strata Cloud Manager/Panorama).
Strong foundational mastery of TCP/IP, DNS, advanced routing concepts (BGP, OSPF, policy-based forwarding, traffic steering), and complex IPSec/GRE tunneling required to bridge hybrid-cloud infrastructure.
Deep technical experience configuring and advising on Identity Provider (IdP) and directory service integrations (Okta, Microsoft Entra ID, Ping Identity, OneLogin) utilizing SAML 2.0, OIDC, RADIUS, and Multi-Factor Authentication (MFA).
Proficient in the engineering and deployment of URL filtering, HTTP/S proxies, Enterprise Data Loss Prevention (DLP), Remote Browser Isolation (RBI), and advanced SSL/TLS decryption (including PKI and certificate management).
Bachelor’s degree in Computer Science, Cyber Security, or equivalent practical training.
Ability to travel up to 15% of the time to meet customer implementation requirements.

Nice To Haves

Highly preferred certifications include Palo Alto Networks elite tracks (PCNSE, PCNSC, PCCSE) or industry equivalents (CCNP/CCIE, JNCIP/JNCIE, CISSP).

Responsibilities

Lead high-visibility technical design workshops and provide architectural governance for complex, enterprise-wide SASE deployments.
Execute the hands-on engineering, configuration, and deployment of Prisma Access (including Mobile User/GlobalProtect environments, Remote Networks, Service Connections) and Prisma SD-WAN.
Guide enterprise customers through complex technical migrations off legacy on-premise hardware (VPNs, proxies) and onto cloud-native platforms.
Identify, design, and implement optimization strategies to maximize platform performance and reliability.
Architect and enforce granular Next-Generation Firewall (NGFW) capabilities, building custom security profiles, App-ID/User-ID configurations, and custom application signatures tailored to specific client threat profiles.
Diagnose and resolve highly complex SASE-related routing, security, and cloud architecture issues.
Collaborate seamlessly with the Technical Assistance Center (TAC) and Account Teams to manage critical customer escalations.
Manage customer expectations, provide proactive feedback loops, and mentor junior engineers to ensure service delivery consistently exceeds operational metrics.
Participate in occasional after-hours maintenance windows or on-call support as required for critical project milestones.