Palo Alto Networks CASB/DLP SME

Top three skills needed:
strong hands-on Palo Alto CASB/DLP experience, including Prisma Access Agent and Prisma Access Browser
Paste in job description below and any notes:

Overview

We are seeking a highly experienced Palo Alto Networks CASB/DLP Subject Matter Expert (SME) for a 90-day engagement. This individual will lead the design, deployment, optimization, and troubleshooting of Palo Alto's cloud security stack, with a primary focus on Prisma Access Browser, Prisma Access Agent, CASB, and Data Loss Prevention (DLP) capabilities.

The ideal consultant will have hands-on experience implementing enterprise-scale cloud security controls, securing SaaS applications, managing data protection policies, and integrating Palo Alto security solutions within complex environments.

Key Responsibilities

• Serve as the lead SME for Palo Alto Prisma Access Browser and Prisma Access Agent implementations.
• Design and deploy CASB controls for SaaS application visibility, governance, and threat protection.
• Implement and optimize Enterprise DLP policies to protect sensitive corporate data.
• Create and tune data classification rules, detection profiles, and incident response workflows.
• Configure and manage Prisma Access integrations with Microsoft 365, Google Workspace, Salesforce, Box, and other cloud applications.
• Assess current security posture and recommend best practices for cloud access security and data protection.
• Troubleshoot complex CASB, DLP, and Prisma Access issues.
• Develop implementation documentation, architecture diagrams, and operational runbooks.
• Collaborate with security, networking, identity, and compliance teams throughout the engagement.
• Provide knowledge transfer and operational guidance to internal teams.

Required Qualifications

• 5+ years of hands-on experience with Palo Alto Networks security technologies.
• Deep expertise with:
• Prisma Access Browser
• Prisma Access Agent
• Palo Alto CASB
• Enterprise DLP
• SaaS Security Posture Management (SSPM)
• Cloud-delivered security services
• Experience securing Microsoft 365, SharePoint Online, OneDrive, Teams, Box, Google Workspace, and other SaaS platforms.
• Strong understanding of:
• Data classification and protection frameworks
• Zero Trust architecture
• Identity and Access Management (IAM)
• SAML, OAuth, SCIM, and Conditional Access
• Microsoft Purview integration concepts
• Ability to independently assess, design, and implement solutions with minimal oversight.
• Excellent communication and documentation skills.

Preferred Qualifications

• Palo Alto Networks certifications:
• PCNSE
• Palo Alto Prisma Access certifications
• Experience with Microsoft Purview DLP.
• Experience supporting regulated environments (PCI, HIPAA, SOX, GDPR).
• Security consulting and architecture experience.