Principal Professional Services Consultant - SASE & Prisma Access
About the job
- At least 12 years of progressive experience in enterprise networking and network security.
- At least 4 years of hands-on experience designing and implementing Palo Alto Networks Prisma Access, the SASE Platform, and Prisma SD-WAN solutions.
- Deep understanding of routing protocols, particularly Border Gateway Protocol, and enterprise wide-area network architectures.
- Strong proficiency in Panorama and Strata Cloud Manager for centralized SASE policy and device management.
- Extensive experience with IPsec, SSL/TLS decryption, GlobalProtect, and public cloud networking using AWS, Azure, or GCP.
- Ability to communicate and present complex technical concepts to technical and non-technical stakeholders.
- Lead the high-level and low-level design of large-scale, global SASE architectures using Palo Alto Networks Prisma Access and the SASE Platform.
- Serve as the primary technical authority and trusted advisor for enterprise clients, guiding C-level executives and network architects through Zero Trust Network Access transformations.
- Conduct capability assessments, scoping workshops, and whiteboard sessions to align business requirements with secure, scalable technical solutions.
- Design traffic steering, routing, and high-availability frameworks for complex hybrid-cloud and multi-cloud environments.
- Oversee and execute end-to-end deployment of Prisma Access, including Cloud Secure Web Gateway, Cloud Access Security Broker, and Firewall as a Service.
- Integrate SASE solutions with enterprise identity providers such as Okta, Azure Active Directory, and Ping Identity using Security Assertion Markup Language and single sign-on.
- Manage migrations from legacy virtual private networks and on-premises proxy solutions to cloud-native Prisma Access environments.
- Act as the highest point of technical escalation for troubleshooting involving routing protocols such as Border Gateway Protocol and Open Shortest Path First, IPsec and SSL VPN tunnels, and performance degradation.
- Mentor and provide technical guidance to senior and junior consultants.
- Develop, standardize, and maintain deployment templates, best-practice documentation, and automation scripts to streamline future service deliveries.
- Industry-relevant SASE certifications.
- Advanced Palo Alto Networks certifications, including PCNSE, PCSAE, or PMSE.
- Experience using infrastructure-as-code and automation tools such as Terraform, Ansible, or Python APIs for security provisioning.
- Prior experience in a Professional Services, Systems Integrator, or Value-Added Reseller environment.
- Deep understanding of broader Zero Trust frameworks and ecosystem integrations.
About the company
Palo Alto Networks builds cybersecurity hardware and software for businesses and public institutions, protecting their networks, cloud workloads and digital identities. Its portfolio combines network firewalls with tools that detect attacks, investigate security alerts and manage access to sensitive systems. Security teams use these products across offices, data centers and cloud environments, with shared data and automated workflows connecting the company's platforms. It earns revenue from appliance sales and software licenses, plus subscriptions and support contracts that keep protections and services active over time. Palo Alto Networks began operations in 2005 and is headquartered in Santa Clara, California.
Company Size
10,001+
Company Stage
IPO
Headquarters
Santa Clara, California
Founded
2005
Get referred to Palo Alto Networks
See people who can refer or advise you
Simplify's Take
What believers are saying
- Consolidated sales grew: September 2026 results report quarterly revenue of $3.41 billion, up 34% from a year earlier.
- Employees choose wellbeing support: Palo Alto Networks' FLEXBenefits funds $1,000 annually for eligible items and experiences.
- Identity products joined the portfolio: Palo Alto Networks completed its CyberArk acquisition in February 2026.
What critics are saying
- Office time limits location flexibility: Palo Alto Networks' Santa Clara engineering listing says most teams work onsite full time.
- Acquisition execution remains complex: Palo Alto Networks flags CyberArk and Chronosphere integration as risks to ongoing operations.
- Distribution is concentrated: September 2026 filings show two distributors generated 30% of Palo Alto Networks' fiscal 2026 revenue.
What makes Palo Alto Networks unique
- Firewall policies control individual app functions: Palo Alto Networks' App-ID allows Slack messaging while blocking file transfers.
- Unmanaged devices receive browser-level protection: Prisma Browser isolates enterprise applications from untrusted endpoints.
- Insurance channels expand response access: Unit 42 says over 50 cyber insurers approve its incident response services.
Help us improve and share your feedback! Did you find this helpful?
Benefits
FLEXBenefits
Healthcare
Wellness
Development
Financial: Traditional & Roth 401(k) options
Time Off
Other Perks
Growth & Insights and Company News
6 month growth
4%1 year growth
0%2 year growth
-1%Palo Alto Networks shares fell about 3.9% to $402.45 at 12:15 EST after Phillip Securities kept its Neutral rating. In an October 12 report, the firm took a positive view of software overall but called the cybersecurity company's valuation stretched. GuruFocus's GF Value chart puts the shares 71.26% above its $235 estimate. Fiscal fourth-quarter next-generation security annual recurring revenue reached $9.1 billion, up 63% year over year. However, a $282 million GAAP net loss became $853 million in adjusted net income, a $1.135 billion gap driven by stock compensation, acquisition-related costs, and other adjustments. Investors now want to see Palo Alto keep customers, turn contracted business into revenue, and generate cash while limiting dilution.
Palo Alto Networks shares have risen 21% since its last earnings report a month ago, outperforming the S&P 500. The cybersecurity company delivered fourth-quarter fiscal 2026 non-GAAP earnings of $1.02 per share, beating estimates by 4.1%. Revenues climbed 34% year-over-year to $3.41 billion, exceeding consensus estimates by 1.8%. Next-Generation Security ARR jumped 63% to $9.10 billion, driven by broad-based strength across Network & AI Security, Cortex, and Idira platforms. The company added approximately 220 net new platformisations in the quarter, up 44% year-over-year. Prisma AIRS reached roughly $120 million in ARR within one year, with over 800 customers. For fiscal 2027, Palo Alto forecasts revenues of $14.10-$14.20 billion, indicating 23-24% growth, with non-GAAP earnings per share between $4.16 and $4.19.
Semtech Corporation has integrated its AirLink secure edge 5G/LTE routers with Palo Alto Networks' next-generation firewalls and Zero Touch PKI to simplify secure connectivity across edge deployments. Separately, Palo Alto Networks launched Unit 42 Continuous Frontier AI Defense, embedding advanced AI models into exposure management services. The company is also extending its AI firewall and agent identity tools into Nvidia's Open Agent Safety Platform. Prisma AIRS' AI Runtime firewall will run on BlueField chips, with identity controls integrated into Nvidia's OpenShell. Palo Alto Networks' investment case centres on whether AI-focused offerings like Prisma AIRS and XSIAM can sustain annual recurring revenue growth. The company projects $18.5 billion revenue and $2.6 billion earnings by 2029, requiring 17.3% yearly revenue growth.
Palo Alto Networks launched a worldwide annual subscription for continuous AI-powered security testing through its Unit 42 division. Shares rose 3.45% to $387.485 on Wednesday morning. The service uses AI models from Anthropic's Claude Mythos 5, OpenAI's GPT-5.6-Cyber, and open-weight models to test applications, APIs, cloud systems, code, and networks. It identifies weaknesses, assesses exploitation risk, and recommends fixes and virtual patches. The shares trade 66.17% above the $233.18 GF Value shown for 23 September. Annual contracts could stabilise Unit 42's revenue, though AI model usage and specialist work carry costs. Renewals, customer results, and margins will determine whether the launch justifies the current valuation.
Palo Alto Networks has launched Unit 42 Continuous Frontier AI Defense, a cybersecurity service that uses AI to identify vulnerabilities and provide remediation guidance through continuous testing. The service integrates Anthropic's Claude Mythos 5 and OpenAI's GPT-5.6-Cyber models through a proprietary multi-model system. It provides continuous vulnerability testing across web applications, APIs, cloud infrastructure, source code repositories and network assets. The company invested $17 million in research and development over six months of internal testing and more than 100 customer engagements. During internal deployment, the system identified a year's worth of security exposures within three weeks. In customer assessments, exposures were identified in all cases, with 37% classified as high or critical severity. More than two-thirds of exposures discovered in third-party applications had no known CVE designation. The service is available worldwide through annual subscriptions with pricing varying by AI model selected.