Palo Alto Prisma SD-WAN (ION) Architect

Job Title: Palo Alto Prisma SD-WAN (ION) Architect - (AWS-Prisma SD WAN, Palo Alto PCNSA / PCNSE certification) Location: Remote - Canada Exp -15+ Years Job Description: Required Skills Networking & SD-WAN Must know Palo Alto Prisma SD-WAN (ION)- on prime and AWS Strata Cloud Manager (SCM)Prisma Access BGP| OSPF| Static Routing| ECMPIPSec VPN| GRE Tunnels SD-WAN High Availability (HA)MPLS| DIA| Broadband Connectivity Traffic Engineering and Application-Aware Routing Cloud AWS VPC| Transit Gateway| Direct Connect Route Tables| Security Groups| NACLs AWS Networking Design Hybrid Cloud Connectivity Security Palo Alto NGFW Zero Trust Architecture SASE/SSE Segmentation and Security Policies Identity and Access Management_ Roles & Responsibilities Design end-to-end Palo Alto Prisma SD-WAN architecture for AWS| branch locations| data centers| and cloud environments. Develop HLD and LLD documentation for SD-WAN deployments. Design AWS-hosted ION Virtual Appliance architecture including HA clusters and multi-region resiliency. Define routing strategies using BGP| static routes| route redistribution| and cloud connectivity models. Deploy and onboard Prisma SD-WAN ION Virtual Appliances in AWS. Integrate AWS VPCs| Transit Gateway| and Direct Connect with Prisma SD-WAN fabric. Configure cloud-to-branch and branch-to-cloud connectivity. Design secure connectivity for applications hosted in AWS.SD-WAN Implementation Configure ION devices| sites| WAN circuits| and VPN fabrics. Implement application-aware policies| QoS| and path selection. Configure WAN overlays and service links. Execute greenfield and brownfield migrations. Design active/active and active/standby ION HA clusters. Plan failover| redundancy| and disaster recovery scenarios. Validate AWS availability zone resilience and WAN failover mechanisms. Integrate Prisma Access and Palo Alto SD-WAN & NGF Implement segmentation| secure zones| and security policies. Ensure compliance with enterprise security standards Lead migration from traditional WAN or third-party SD-WAN solutions to Prisma SD-WAN. Execute cloud migration and data center exit initiatives. Perform pilot deployments and production cutovers. Diagnose routing| tunnel| and application performance issues. Work with Palo Alto TAC for critical incidents and platform bugs. Optimize application experience and network performance. Provide L3/L4 engineering support. Prepare HLD| LLD| MOP| migration runbooks| rollback plans| and SOPs. Participate in architecture reviews and customer workshops. Present technical solutions to customers and stakeholders.________________________________________ Mandatory Certifications Palo Alto PCNSA / PCNSE Palo Alto Prisma SD-WAN Certification (Preferred)AWS

Design and implement end-to-end Palo Alto Prisma SD-WAN architectures across AWS, branch locations, and data centers. Develop high-level and low-level design documentation while managing cloud migrations and L3/L4 engineering support.

Requires over 15 years of experience with deep expertise in Palo Alto Prisma SD-WAN and AWS networking. Mandatory certifications include PCNSA or PCNSE, with Prisma SD-WAN and AWS certifications preferred.

• Network DesignPreferred
• OSPFPreferred

Identified from the job description. Confirm important requirements above.

• Palo Alto Prisma SD-WAN
• AWS Networking
• BGP
• OSPF
• Prisma Access
• NGFW
• Zero Trust Architecture
• SASE
• SSE
• Transit Gateway
• Direct Connect
• Traffic Engineering
• High Availability
• Route Redistribution
• Network Design
• Cloud Migration

• Technology
• Engineering
• Security & Safety
• Consulting
• Software

Minimum education

Professional degree

Minimum experience

10+ years

Posting language

English

Working hours

40 hours per week

Seniority

Mid-Senior level

Application method

Direct apply is available