Network Architect – Palo Alto

Job Summary:

We are seeking an experienced Network Architect with 9+ years of expertise in designing, implementing, and securing enterprise network infrastructures. The ideal candidate will have deep hands-on experience with Palo Alto Networks next-generation firewalls, network security architecture, cloud networking, routing, switching, and enterprise security solutions. This role involves designing scalable, secure, and highly available network environments across on-premises and cloud platforms.

Key Responsibilities:

• Design, implement, and maintain enterprise network architecture for large-scale environments.
• Architect secure network solutions using Palo Alto Networks NGFW, Panorama, and Prisma technologies.
• Develop network security standards, segmentation strategies, and zero-trust architectures.
• Configure and manage Layer 2/Layer 3 networking, routing, switching, VPNs, NAT, and ACLs.
• Design high-availability and disaster recovery network solutions.
• Lead firewall migrations, policy optimization, and security audits.
• Integrate cloud networking with AWS, Azure, and Google Cloud Platform.
• Implement SD-WAN and secure remote access solutions.
• Perform network capacity planning, performance tuning, and troubleshooting.
• Collaborate with security, cloud, infrastructure, and application teams to deliver secure network solutions.
• Create architecture documentation, network diagrams, and technical standards.
• Mentor network engineers and provide technical leadership.

Required Skills:

• 9+ years of enterprise networking experience.
• Strong expertise in Palo Alto Networks Firewalls (PAN-OS).
• Experience with Panorama centralized firewall management.
• Knowledge of Prisma Access, Prisma SD-WAN, and Prisma Cloud.
• Deep understanding of TCP/IP, DNS, DHCP, VLANs, STP, OSPF, BGP, EIGRP, MPLS, VXLAN, and EVPN.
• Strong experience with VPN technologies (IPSec, SSL VPN, GlobalProtect).
• Expertise in routing, switching, load balancing, and network segmentation.
• Experience with Cisco, Juniper, or Arista networking technologies.
• Hands-on experience with AWS, Azure, or Google Cloud Platform networking.
• Understanding of Zero Trust Architecture and micro-segmentation.
• Familiarity with IDS/IPS, NAC, SIEM integration, and DDoS protection.
• Experience with automation using Python, Ansible, Terraform, or REST APIs.
• Strong troubleshooting and root-cause analysis skills.

Preferred Qualifications:

• Bachelor''''''''s degree in Computer Science, Information Technology, or related field.
• Palo Alto certifications such as PCNSA, PCNSE, or higher.
• Cisco certifications (CCNP/CCIE) are a plus.
• Cloud certifications (AWS, Azure, or Google Cloud Platform) are preferred.

Preferred Technologies:

• Palo Alto NGFW
• Panorama
• Prisma Access
• Prisma SD-WAN
• GlobalProtect
• Cisco Nexus
• Cisco Catalyst
• Juniper
• Arista
• AWS
• Azure
• Google Cloud Platform
• BGP
• OSPF
• MPLS
• SD-WAN
• VPN
• VLAN
• VXLAN
• EVPN
• DNS
• DHCP
• NAC
• Python
• Ansible
• Terraform
• Splunk
• ServiceNow