Professional Services Consultant, AI Security

Our Mission At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place. Who We Are In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us! This role is remote, but distance is no barrier to impact. Our hybrid teams collaborate across geographies to solve big problems, stay close to our customers, and grow together. You will be part of a culture that values trust, accountability, and shared success where your work truly matters. Job Summary As a Professional Services Consultant focused on SASE, you will serve as a key technical authority and advisory lead helping enterprise customers transform their cloud security architecture. In this role, you will bridge the gap between high-level strategy and deep technical execution—driving the hands-on implementation, custom configuration, and architectural integration of our cloud-delivered security solutions. You do not shy away from complex engineering challenges and thrive when solving intricate routing, security policy, and hybrid-cloud integration issues. You will act as the trusted technical face of Palo Alto Networks, interacting directly with enterprise clients to secure their digital environments and empower their internal teams. While deep platform experience is highly desired, we place immense value on a foundational mastery of networking and security principles, backed by exceptional communication skills. A strong background in migrating clients away from competitor technologies is a distinct advantage. To ensure your success, you will be supported by our Professional Services Academy, equips you with deep product expertise before your first customer engagement. Key Responsibilities Strategic Design: Lead high-visibility technical design workshops and provide architectural governance for complex, enterprise-wide SASE deployments. End-to-End Solution Deployment: Execute the hands-on engineering, configuration, and deployment of Prisma Access (including Mobile User/GlobalProtect environments, Remote Networks, Service Connections) and Prisma SD-WAN. Legacy Migrations & Optimization: Guide enterprise customers through complex technical migrations off legacy on-premise hardware (VPNs, proxies) and onto cloud-native platforms. Identify, design, and implement optimization strategies to maximize platform performance and reliability. Policy & Signature Engineering: Architect and enforce granular Next-Generation Firewall (NGFW) capabilities, building custom security profiles, App-ID/User-ID configurations, and custom application signatures tailored to specific client threat profiles. Advanced Troubleshooting & Escalation Management: Diagnose and resolve highly complex SASE-related routing, security, and cloud architecture issues. Collaborate seamlessly with the Technical Assistance Center (TAC) and Account Teams to manage critical customer escalations. Service Delivery Excellence: Manage customer expectations, provide proactive feedback loops, and mentor junior engineers to ensure service delivery consistently exceeds operational metrics. Participate in occasional after-hours maintenance windows or on-call support as required for critical project milestones. Qualifications 5+ years of customer-facing experience in a technical consulting, Professional Services, or Solutions Architecture role, with a proven track record of managing enterprise project scopes and client relationships. 2–3 years of hands-on experience in the architectural design, deployment, and optimization of cloud-delivered security architectures (Prisma Access, Prisma SD-WAN, Prisma Browser, and Strata Cloud Manager/Panorama). Strong foundational mastery of TCP/IP, DNS, advanced routing concepts (BGP, OSPF, policy-based forwarding, traffic steering), and complex IPSec/GRE tunneling required to bridge hybrid-cloud infrastructure. Deep technical experience configuring and advising on Identity Provider (IdP) and directory service integrations (Okta, Microsoft Entra ID, Ping Identity, OneLogin) utilizing SAML 2.0, OIDC, RADIUS, and Multi-Factor Authentication (MFA). Proficient in the engineering and deployment of URL filtering, HTTP/S proxies, Enterprise Data Loss Prevention (DLP), Remote Browser Isolation (RBI), and advanced SSL/TLS decryption (including PKI and certificate management). Bachelor’s degree in Computer Science, Cyber Security, or equivalent practical training. Highly preferred certifications include Palo Alto Networks elite tracks (PCNSE, PCNSC, PCCSE) or industry equivalents (CCNP/CCIE, JNCIP/JNCIE, CISSP). Ability to travel up to 15% of the time to meet customer implementation requirements. Compensation Disclosure The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/com-missioned roles) is expected to be the annual range listed below. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found here . $140,000.00 - $192,500.00/yr Our Commitment We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at . Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines. Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.