Role Summary The Security Consultant will be responsible for designing, implementing, configuring, and troubleshooting advanced network security solutions using Palo Alto Networks Next-Generation Firewalls (NGFW) and Secure Access Service Edge (SASE) technologies, with a primary focus on Prisma Access.

The ideal candidate will possess strong networking and security fundamentals, hands-on experience with Palo Alto Networks security platforms, and expertise in cloud-delivered security, remote access VPNs, enterprise firewall infrastructure, and hybrid cloud connectivity.

The role requires the ability to design scalable security architectures, resolve complex network and security issues, collaborate with customers, and provide technical guidance to internal teams.

Key Responsibilities

A. Prisma Access and Network Security Implementation

- Deploy, configure, and manage Palo Alto Networks NGFWs and cloud-delivered security solutions, including Prisma Access, GlobalProtect, Panorama, and Strata Cloud Manager.
- Design, implement, and maintain Prisma Access architectures for mobile users, remote networks, and service connections.
- Implement scalable and secure SASE solutions aligned with enterprise security requirements.
- Configure and maintain firewall policies, security rules, centralized policy management, and network security controls.
- Support end-to-end implementation and maintenance of enterprise firewall and cloud security infrastructures.

B. Network Architecture and Connectivity

- Design and implement remote access and site-to-site VPN solutions using SSL/TLS and IPsec technologies.
- Configure and troubleshoot IPsec tunnels, routing, Network Address Translation (NAT), Quality of Service (QoS), and packet flows.
- Apply networking fundamentals, including the OSI model, TCP/IP, IP subnetting, DNS, and routing protocols such as BGP.
- Troubleshoot connectivity across on-premises, cloud, branch office, and remote user environments.
- Design secure connectivity between enterprise networks, cloud environments, and Prisma Access service connections.

C. Advanced Troubleshooting and Diagnostics

- Diagnose and resolve complex network, firewall, VPN, and security connectivity issues.
- Analyze packet captures, network traffic, firewall logs, and Prisma Access diagnostic information.
- Use Wireshark and Palo Alto Networks diagnostic tools to identify packet drops, routing issues, NAT problems, latency, and session failures.
- Troubleshoot application connectivity involving DNS, HTTP/HTTPS, SSL/TLS, FTP, and other network protocols.
- Perform root cause analysis and implement corrective and preventive measures for recurring incidents.

D. Authentication, Certificates, and Access Security

- Configure and troubleshoot authentication and identity integration using SAML and LDAP.
- Implement and manage certificate-based security,



Public Key Infrastructure (PKI), and certificate lifecycle requirements.
- Configure and troubleshoot authentication flows for Prisma Access and GlobalProtect deployments.
- Ensure secure remote access through appropriate authentication, authorization, and access control policies.

E. Centralized Management and Operations

- Use Panorama and Strata Cloud Manager for centralized configuration, security policy management, monitoring, and operational workflows.
- Monitor firewall and Prisma Access logs to identify security events, connectivity issues, and policy violations.
- Maintain consistent security configurations and operational standards across distributed environments.
- Support ongoing platform maintenance, configuration changes, and security policy optimization.

F. Customer Engagement and Technical Leadership

- Collaborate with customers and stakeholders to understand business requirements, network architecture, and security objectives.
- Recommend and implement suitable SASE and network security solutions using Prisma Access.
- Provide technical guidance, knowledge transfer, and training on Prisma Access, GlobalProtect, Strata Cloud Manager, Panorama, and Palo Alto Networks firewalls.
- Document solution designs, configurations, troubleshooting procedures, and operational best practices.
- Support technical escalations and coordinate with relevant teams to resolve complex customer issues.

Required Skills and Experience A. Core Networking Skills

- Strong understanding of the OSI model, TCP/IP, packet flow, and network troubleshooting.
- Knowledge of IP addressing, subnetting, routing, switching, and BGP.
- Hands-on experience with DNS, HTTP/HTTPS, SSL/TLS, FTP, NAT, and QoS.
- Understanding of cloud networking and hybrid network connectivity.

B. Palo Alto Networks and Prisma Access

- Hands-on experience with Palo Alto Networks Next-Generation Firewalls.
- Practical experience implementing and managing Prisma Access.
- Experience with GlobalProtect VPN for remote user connectivity.
- Knowledge of Panorama and/or Strata Cloud Manager for centralized management.
- Understanding of SASE architecture, cloud-delivered security, remote networks, mobile users, and service connections.

C. VPN and Security Technologies

- Strong knowledge of IPsec VPN and SSL/TLS-based remote access technologies.
- Experience configuring and troubleshooting VPN tunnels and secure network connectivity.




- Understanding of firewall security policies, NAT, traffic inspection, and access control.
- Knowledge of SAML, LDAP, PKI, certificates, and authentication troubleshooting.

D. Troubleshooting and Diagnostic Tools

- Proficiency in Wireshark and packet capture analysis.
- Experience analyzing firewall traffic logs, system logs, and Prisma Access diagnostics.
- Ability to troubleshoot routing, packet drops, session failures, authentication errors, and application connectivity issues.
- Strong analytical, logical, and systematic problem-solving skills.

E. Cloud Security and Solution Design

- Understanding of cloud networking and enterprise security architectures.
- Ability to design, implement, and maintain secure, scalable SASE and firewall solutions.
- Experience troubleshooting connectivity across on-premises and cloud environments.
- Ability to translate business and technical requirements into practical security solutions.

Preferred Skills

- Palo Alto Networks certifications such as PCNSE, PCNSA, or Palo Alto Networks SSE/Prisma Access certifications.
- Experience with complex enterprise-scale Prisma Access deployments.
- Experience migrating or integrating existing network security infrastructure with SASE solutions.
- Palo Alto Networks certifications relevant to firewall and network security technologies.
- Experience leading technical implementations, customer workshops, or knowledge-transfer sessions.
- Strong technical documentation, communication, and stakeholder-management skills.

Education

- Undergraduate: Any Graduate
- Postgraduate: Any Postgraduate

A degree in Computer Science, Information Technology, Networking, Cybersecurity, or a related field is advantageous.

Key Skills and Keywords

Primary Skills

- Prisma Access
- Palo Alto Networks NGFW
- Network Security
- SASE Architecture
- GlobalProtect VPN
- Panorama
- Strata Cloud Manager

Networking and Connectivity

- TCP/IP
- OSI Model
- IP Subnetting
- BGP Routing
- IPsec VPN
- SSL/TLS
- NAT
- QoS
- DNS
- Cloud Networking
- Remote Access

Identity and Security

- SAML
- LDAP
- PKI
- Certificate Management
- Security Policies
- Firewall Configuration

Troubleshooting and Operations

- Wireshark
- Packet Capture Analysis
- Network Diagnostics
- Root Cause Analysis
- Troubleshooting
- Policy Management
- Implementation and Maintenance

Ideal Candidate Profile The ideal candidate is a hands-on network security skilled with strong expertise in Palo Alto Networks technologies and practical experience designing, implementing, and troubleshooting Prisma Access solutions. The candidate should be capable of independently handling complex technical issues, developing secure enterprise architectures, engaging with customers, and providing technical leadership across implementation and operational activities.

📌 Professional Services Consultant-Prisma Access (Delhi)
🏢 Mandal Solution
📍 Delhi