Senior Technical Support Engineer- SASE (NAM Shift)

Our Mission At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place. Who We Are In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us! We believe collaboration thrives in person. That’s why most of our teams work from the office full time, with flexibility when it’s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes. Job Summary Job Summary As a Senior Technical Engineer for SASE & SD-WAN, you will be a key technical resource responsible for the architecture, deployment, and optimization of our global network fabric. This role requires a blend of deep routing expertise and a modern 'security-first' mindset to bridge the gap between traditional networking and cloud-native security, ensuring users connect to applications securely and efficiently regardless of location. Key Responsibilities Lead the architecture and design of global SD-WAN overlays and Secure Access Service Edge (SASE) integrations, including ZTNA, CASB, and SWG. Orchestrate the migration from legacy MPLS/VPN architectures to agile, software-defined solutions, ensuring minimal disruption. Proactively collaborate with security teams to implement and enforce Zero Trust principles across the wide area network. Act as the final point of escalation for complex network outages, applying advanced problem-solving to identify root causes and provide practical solutions. Analyze traffic patterns and application performance to fine-tune Forward Error Correction (FEC) and Quality of Service (QoS) policies for optimal user experience. Develop automation scripts using Python, Ansible, or Terraform to streamline repetitive configuration tasks and support Infrastructure as Code (IaC) deployments. Challenge existing processes curiously and positively to simplify network operations and improve overall service delivery. Qualifications Required Qualifications 5+ years of experience in Network Engineering, with a minimum of 3 years focused on SD-WAN and/or SASE technologies. Advanced, hands-on experience with SD-WAN platforms such as Cisco Viptela/Velocloud, Palo Alto Prisma SD-WAN, or Fortinet. Mastery of complex routing protocols including BGP and OSPF, and tunneling protocols like IPsec and GRE. Demonstrated experience with SASE components including ZTNA (Zero Trust Network Access), SWG (Secure Web Gateway), CASB (Cloud Access Security Broker), and FWaaS (Firewall as a Service). Strong understanding of cloud networking concepts within AWS, Azure, or GCP (e.g., Direct Connect, ExpressRoute, Transit Gateways). Preferred Qualifications Professional-level certifications such as CCNP/CCIE (Enterprise or Security), PCNSE, or equivalent provider-specific SASE certifications. Proficiency with network monitoring and deep-packet analysis tools (e.g., ThousandEyes, Wireshark, SolarWinds). Experience developing automation scripts (Python, Ansible, Terraform) for network infrastructure. Proven ability to build trusted relationships and communicate complex technical concepts to non-technical stakeholders. Our Commitment We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at . Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines. Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.