Publié il y a 3 mois
Network Security Architect - Palo Alto Prisma SD-WAN (ION), AWS, PCNSA / PCNSE
@ Astra North Infoteck Inc.
Québec, Québec
En bref
Astra North Infoteck Inc. is hiring a contract Network Security Architect for remote work in Canada. The role designs and deploys Palo Alto Prisma SD-WAN (ION) and AWS-hosted architectures, including HA, migrations and cloud connectivity. Palo Alto PCNSA/PCNSE certification is mandatory.
Responsabilités :
- Design end-to-end Prisma SD-WAN architecture for AWS, branches and data centers
- Develop HLD and LLD documentation
- Deploy and onboard ION virtual appliances in AWS
- Integrate AWS VPCs, Transit Gateway and Direct Connect
- Lead migrations and production cutovers
Résumé des exigences :
- Palo Alto Prisma SD-WAN (ION) and SCM expertise
- Strong AWS networking and hybrid cloud design
- BGP, OSPF, IPSec VPN and SD-WAN HA knowledge
- Mandatory Palo Alto PCNSA or PCNSE certification
- Prisma SD-WAN certification preferred
Outils et compétences
Source et dates
Type de source non vérifié · zoho
- Date publiée par l’employeur
- 2026-08-27
- Première détection par notre source
- 2026-10-11
- Mise à jour du dossier source
- 2026-10-11
Ces dates décrivent le dossier source, pas une vérification en direct du recrutement. Consultez l’offre originale.
Détails du poste
| Niveau | Senior |
| Domaine | Développement logiciel |
| Milieu de travail | Domicile, Chez les clients |
| Position | Surtout assis |
| Exigences physiques | physique faible · ordinateur élevé |
| Langues | English |
| Permis et certifications | Palo Alto PCNSA, Palo Alto PCNSE, Palo Alto Prisma SD-WAN certification |
Résumé et détails rédigés par l’IA à partir de l’offre; l’offre de l’employeur fait foi.
Astra North Infoteck Inc.
| Champ | Valeur |
|---|---|
| Offres sur Jobsy | 426 |
Role: Network Security Architect - Palo Alto Prisma SD-WAN (ION), AWS
Remote - Canada
Required Skills
Networking & SD-WAN
* Must know Palo Alto Prisma SD-WAN (ION) - on prime and AWS Strata Cloud Manager (SCM)
* Prisma Access
* BGP
* OSPF
* Static Routing
* ECMP
* IPSec VPN
* GRE Tunnels
* SD-WAN High Availability (HA)
* MPLS
* DIA
* Broadband Connectivity
* Traffic Engineering and Application-Aware Routing
### Cloud
* AWS VPC
* Transit Gateway
* Direct Connect
* Route Tables
* Security Groups
* NACLs
* AWS Networking Design
* Hybrid Cloud Connectivity
### Security
* Palo Alto NGFW
* Zero Trust Architecture
* SASE/SSE
* Segmentation and Security Policies
* Identity and Access Management
## Roles & Responsibilities
* Design end-to-end Palo Alto Prisma SD-WAN architecture for AWS, branch locations, data centers, and cloud environments.
* Develop HLD and LLD documentation for SD-WAN deployments.
* Design AWS-hosted ION Virtual Appliance architecture including HA clusters and multi-region resiliency.
* Define routing strategies using BGP, static routes, route redistribution, and cloud connectivity models.
* Deploy and onboard Prisma SD-WAN ION Virtual Appliances in AWS.
* Integrate AWS VPCs, Transit Gateway, and Direct Connect with Prisma SD-WAN fabric.
* Configure cloud-to-branch and branch-to-cloud connectivity.
* Design secure connectivity for applications hosted in AWS.
### SD-WAN Implementation
* Configure ION devices, sites, WAN circuits, and VPN fabrics.
* Implement application-aware policies, QoS, and path selection.
* Configure WAN overlays and service links.
* Execute greenfield and brownfield migrations.
* Design active/active and active/standby ION HA clusters.
* Plan failover, redundancy, and disaster recovery scenarios.
* Validate AWS availability zone resilience and WAN failover mechanisms.
### Integrate Prisma Access and Palo Alto SD-WAN & NGFW
* Implement segmentation, secure zones, and security policies.
* Ensure compliance with enterprise security standards.
* Lead migration from traditional WAN or third-party SD-WAN solutions to Prisma SD-WAN.
* Execute cloud migration and data center exit initiatives.
* Perform pilot deployments and production cutovers.
* Diagnose routing, tunnel, and application performance issues.
* Work with Palo Alto TAC for critical incidents and platform bugs.
* Optimize application experience and network performance.
* Provide L3/L4 engineering support.
* Prepare HLD, LLD, MOP, migration runbooks, rollback plans, and SOPs.
* Participate in architecture reviews and customer workshops.
* Present technical solutions to customers and stakeholders.
## Mandatory Certifications
* Palo Alto PCNSA / PCNSE
* Palo Alto Prisma SD-WAN Certification (Preferred)
Journal
Visible seulement par vous. Conservé sur cet appareil, et dans votre compte une fois connecté.