Solution Engineer, Palo Alto Networks

The Redesign Group

1d • $120,000 - $160,000

About The Position

The Redesign Group is seeking a Solution Engineer with deep expertise in Palo Alto Networks products to serve as the senior technical authority for Palo Alto delivery. The position combines hands-on solution design and implementation with responsibility for advancing the maturity of Redesign’s Palo Alto practice. This includes developing delivery standards and reference architectures, training and mentoring engineers, creating service offerings, and achieving partner-level certifications that support Redesign’s standing in the Palo Alto Networks partner ecosystem.

The Solution Engineer designs, implements, migrates, and optimizes Palo Alto Networks solutions for enterprise and data center customers. The portfolio includes PA Series hardware firewalls, VM Series and CN Series software firewalls, Cloud NGFW, Panorama, Strata Cloud Manager, Cloud Delivered Security Services, Enterprise Data Loss Prevention, IoT and OT Security, GlobalProtect, and related identification and inspection technologies. Engagements may also extend to Prisma Access, Prisma SD-WAN, and the Cortex platform.

The role owns assigned projects from scope definition and design through implementation, validation, documentation, and knowledge transfer. It serves as the primary customer-facing technical lead, supports presales activity as needed, and contributes to continuous improvement of delivery methods. The engineer also maintains relationships with Palo Alto Networks and channel partners, monitors changes to the vendor portfolio, and shares relevant developments with the practice and customers.

Requirements

• At least five years of network security engineering experience, including at least three years using Palo Alto Networks as the primary platform.
• A demonstrated record of multiple full-lifecycle Palo Alto Networks deployments in enterprise and data center environments.
• Comprehensive PAN-OS proficiency, including security and NAT policy, decryption, App ID and User ID, threat prevention tuning, high availability design, upgrades, and command-line troubleshooting.
• Experience administering Panorama at scale, including templates, device groups, and policy hierarchy; familiarity with Strata Cloud Manager is expected.
• Strong data center networking fundamentals, including BGP and OSPF, VLAN and VRF design, and virtualization platforms such as VMware vSphere, NSX, and Kubernetes.
• Demonstrated migration experience from Cisco, Check Point, Fortinet, and Juniper, with an emphasis on improving rather than simply copying rule bases.
• Ability to present and defend designs to experienced network and security teams.
• Evidence of sustained professional investment in the Palo Alto platform, such as a home lab, active certification pursuit, or community participation.
• Strong technical writing skills, including producing design documentation and as-built records that customer operations teams can use.
• Experience mentoring engineers or delivering formal technical training.
• Bachelor’s degree in a technical discipline or equivalent professional experience; demonstrated experience is weighted more heavily than formal education.

Nice To Haves

• Partner, reseller, MSSP, or consulting experience.
• Palo Alto Networks Specialist-level or higher credentials in the current role-based certification program.
• Retired product-coded Palo Alto Networks certifications; Redesign will support transition to the current framework.
• Networking certification at the CCNP Security, CCNP Enterprise, or CCIE level, or equivalent demonstrated routing and switching expertise.
• Security certification such as CISSP, GIAC credentials including GCFW, GCIA, or GSEC, or CompTIA Security+.
• Cloud certification at the associate level or relevant to VM Series, Cloud NGFW, and Prisma Cloud deployments.
• Automation and API proficiency, such as PAN-OS APIs, Python, Ansible, or Terraform.
• Working familiarity with compliance frameworks such as PCI DSS, HIPAA, NIST 800-53, or CMMC.
• Prior experience within a NextWave partner organization.

Responsibilities

• Design, implement, and migrate Palo Alto Networks solutions for enterprise and data center customers across hardware, software, cloud firewall, and centralized management products.
• Deploy and optimize the broader Palo Alto product family, including Cloud Delivered Security Services, Enterprise Data Loss Prevention, IoT and OT Security, GlobalProtect, decryption, and App ID, User ID, Content ID, and Device ID technologies.
• Execute data center-scale implementations, including high availability, multiple virtual systems, virtual wire and Layer 3 deployments, zone-based segmentation, dynamic routing integration, and east-west inspection.
• Lead migrations from legacy and competing firewall platforms, including rule-base conversion, policy optimization, cutover planning, and rollback documentation.
• Extend engagements into adjacent portfolio areas such as Prisma Access, Prisma SD-WAN, and Cortex when customer requirements call for them.
• Own assigned projects end to end, including scope, design documentation, build, test planning, implementation, validation, and knowledge transfer.
• Manage project schedules and milestones, proactively identify and escalate risks, and maintain delivery commitments with limited oversight.
• Serve as the primary customer-facing technical lead by conducting workshops and discovery, presenting recommendations, and translating business and security requirements into Palo Alto architectures.
• Produce high- and low-level designs, as-built records, validation and test results, and operational runbooks for customer handover.
• Support presales activities, including scoping, effort estimates, bill-of-materials validation, and technical responses to customer inquiries.
• Develop delivery standards, reference architectures, deployment templates, configuration baselines, and repeatable service offerings for the Palo Alto practice.
• Train and mentor Redesign engineers, deliver internal enablement sessions, and maintain labs for hands-on skill development.
• Develop Palo Alto-based service offerings, particularly in secure access service edge, cloud security, and security operations.
• Capture lessons learned from engagements and incorporate them into delivery methods and practice standards.
• Achieve and maintain Palo Alto Networks partner-level certifications supporting Redesign’s NextWave partner standing and specializations.
• Build and maintain working relationships with Palo Alto Networks systems engineers, channel teams, and distribution partners.
• Monitor PAN-OS releases, product introductions, end-of-life announcements, and portfolio changes, and communicate relevant updates to the practice and customers.

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• 401(k) retirement plan with company match, subject to an annual dollar cap
• Flexible time off plan
• 15 paid holidays
• Sick leave, varying by state and at least the applicable state minimum
• Short-term disability
• Long-term disability
• Life insurance
• Paid parental leave

What This Job Offers

• Job Type: Full-time
• Career Level: Senior