Postuler

Publié il y a 3 mois

Network Security Architect - Palo Alto Prisma SD-WAN (ION), AWS, PCNSA / PCNSE

@ Astra North Infoteck Inc.

Québec, Québec

Contrat
Postuler
SIGNAUX

En bref

Astra North Infoteck Inc. is hiring a contract Network Security Architect for remote work in Canada. The role designs and deploys Palo Alto Prisma SD-WAN (ION) and AWS-hosted architectures, including HA, migrations and cloud connectivity. Palo Alto PCNSA/PCNSE certification is mandatory.

Responsabilités :

  • Design end-to-end Prisma SD-WAN architecture for AWS, branches and data centers
  • Develop HLD and LLD documentation
  • Deploy and onboard ION virtual appliances in AWS
  • Integrate AWS VPCs, Transit Gateway and Direct Connect
  • Lead migrations and production cutovers

Résumé des exigences :

  • Palo Alto Prisma SD-WAN (ION) and SCM expertise
  • Strong AWS networking and hybrid cloud design
  • BGP, OSPF, IPSec VPN and SD-WAN HA knowledge
  • Mandatory Palo Alto PCNSA or PCNSE certification
  • Prisma SD-WAN certification preferred

Outils et compétences

Source et dates

Type de source non vérifié · zoho

Date publiée par l’employeur
2026-08-27
Première détection par notre source
2026-10-11
Mise à jour du dossier source
2026-10-11

Ces dates décrivent le dossier source, pas une vérification en direct du recrutement. Consultez l’offre originale.

Détails du poste

NiveauSenior
DomaineDéveloppement logiciel
Milieu de travailDomicile, Chez les clients
PositionSurtout assis
Exigences physiquesphysique faible · ordinateur élevé
LanguesEnglish
Permis et certificationsPalo Alto PCNSA, Palo Alto PCNSE, Palo Alto Prisma SD-WAN certification

Résumé et détails rédigés par l’IA à partir de l’offre; l’offre de l’employeur fait foi.

Astra North Infoteck Inc.

ChampValeur
Offres sur Jobsy426
Description

Role: Network Security Architect - Palo Alto Prisma SD-WAN (ION), AWS

Remote - Canada

Required Skills

Networking & SD-WAN

* Must know Palo Alto Prisma SD-WAN (ION) - on prime and AWS Strata Cloud Manager (SCM)

* Prisma Access

* BGP

* OSPF

* Static Routing

* ECMP

* IPSec VPN

* GRE Tunnels

* SD-WAN High Availability (HA)

* MPLS

* DIA

* Broadband Connectivity

* Traffic Engineering and Application-Aware Routing

### Cloud

* AWS VPC

* Transit Gateway

* Direct Connect

* Route Tables

* Security Groups

* NACLs

* AWS Networking Design

* Hybrid Cloud Connectivity

### Security

* Palo Alto NGFW

* Zero Trust Architecture

* SASE/SSE

* Segmentation and Security Policies

* Identity and Access Management

## Roles & Responsibilities

* Design end-to-end Palo Alto Prisma SD-WAN architecture for AWS, branch locations, data centers, and cloud environments.

* Develop HLD and LLD documentation for SD-WAN deployments.

* Design AWS-hosted ION Virtual Appliance architecture including HA clusters and multi-region resiliency.

* Define routing strategies using BGP, static routes, route redistribution, and cloud connectivity models.

* Deploy and onboard Prisma SD-WAN ION Virtual Appliances in AWS.

* Integrate AWS VPCs, Transit Gateway, and Direct Connect with Prisma SD-WAN fabric.

* Configure cloud-to-branch and branch-to-cloud connectivity.

* Design secure connectivity for applications hosted in AWS.

### SD-WAN Implementation

* Configure ION devices, sites, WAN circuits, and VPN fabrics.

* Implement application-aware policies, QoS, and path selection.

* Configure WAN overlays and service links.

* Execute greenfield and brownfield migrations.

* Design active/active and active/standby ION HA clusters.

* Plan failover, redundancy, and disaster recovery scenarios.

* Validate AWS availability zone resilience and WAN failover mechanisms.

### Integrate Prisma Access and Palo Alto SD-WAN & NGFW

* Implement segmentation, secure zones, and security policies.

* Ensure compliance with enterprise security standards.

* Lead migration from traditional WAN or third-party SD-WAN solutions to Prisma SD-WAN.

* Execute cloud migration and data center exit initiatives.

* Perform pilot deployments and production cutovers.

* Diagnose routing, tunnel, and application performance issues.

* Work with Palo Alto TAC for critical incidents and platform bugs.

* Optimize application experience and network performance.

* Provide L3/L4 engineering support.

* Prepare HLD, LLD, MOP, migration runbooks, rollback plans, and SOPs.

* Participate in architecture reviews and customer workshops.

* Present technical solutions to customers and stakeholders.

## Mandatory Certifications

* Palo Alto PCNSA / PCNSE

* Palo Alto Prisma SD-WAN Certification (Preferred)


Emplois semblables

  • Network Security Architect

    Montréal, QC
    90k–130k $/an

    Aversan: (www.aversan.com) is a trusted multi-service engineering and electronics manufacturing company.

    5+ ansCandidates need at least 5 years of network security experience, with firewall, IDS/IPS, VPN, zero-trust and cloud networking skills. CISSP or SANS GIAC certification is expected, and fluency in French and English is required.

    Firewalls, IDS/IPS, Secure web gateways, SIEM, EDR, AWS

  • Senior Network Security Architect

    Toronto, ON
    Sur placeTemps plein

    Applied Materials

    12+ ansApplied Materials needs a candidate with 12+ years in enterprise networking and security, 5+ years in architecture or technical leadership, and a bachelor's degree. Strong knowledge of Zero Trust, firewalls, SASE/SSE, SD-WAN, cloud security and NDR is required.

    Palo Alto Networks, Fortinet, Check Point, Zscaler, Akamai, ExtraHop

  • Network Security Architect

    Toronto, ON

    Deloitte

    5+ ansCandidates need 5+ years delivering network and security transformations, deep networking knowledge, and cloud security experience in Azure, AWS, or GCP. Security certifications such as CISSP or CCSP and strong client-facing communication are preferred.

    Firewalls, VPNs, IDS/IPS, SD-WAN, NAC, Palo Alto

  • Senior Network Security Architect

    Toronto, ON
    Temps plein

    Applied Materials Canada, Inc

    12+ ans5+ gestionCandidates need a bachelor's degree, 12+ years in enterprise networking and security, and 5+ years in architecture or technical leadership. They need deep knowledge of Zero Trust, firewalls, SASE, SD-WAN, cloud security and threat detection, and experience designing large security architectures.

    Palo Alto Networks, Fortinet, Check Point, Zscaler, Akamai, ExtraHop

Lieux et modes de travail

Lieux

Tout le CanadaTélétravail · Hybride · Sur place · Sur le terrain

Astuce : ajoutez le télétravail pour élargir la recherche.

Exclure des lieux

Mode de travail

Offres de cette entreprise dans les résultats

Voici les offres de cette entreprise chargées dans votre recherche. Elle peut avoir d’autres postes ouverts.