SASE Security Consultant Palo Alto Networks

About the RoleWe are seeking an experienced SASE Professional Services Consultant to join our Professional Services team in Medellín, Colombia. In this customer-facing role, you will lead the design, deployment, migration, and optimization of enterprise SASE environments, helping customers adopt secure, scalable, and cloud-delivered security architectures.The ideal candidate brings strong hands-on experience with Palo Alto Networks technologies, particularly Prisma Access, along with solid networking, security, and troubleshooting expertise. You will work closely with enterprise customers and cross-functional teams to deliver successful security transformation projects based on Zero Trust principles.Key ResponsibilitiesDesign and implement enterprise SASE architectures.Deploy, configure, and optimize Prisma Access environments, including:Mobile Users (GlobalProtect)Remote NetworksService ConnectionsSecurity PoliciesTraffic SteeringImplement and optimize Prisma SD-WAN solutions.Lead migrations from traditional VPN, proxy, and on-premises security infrastructures to cloud-delivered SASE platforms.Configure, test, and troubleshoot IPSec and GRE tunnels.Implement and support routing protocols including BGP, OSPF, and Policy-Based Forwarding (PBF).Configure and manage security policies, URL Filtering, SSL/TLS inspection, and other Next-Generation Firewall capabilities.Integrate SASE solutions with Identity Providers (IdPs) such as Microsoft Entra ID (Azure AD), Okta, and similar platforms.Configure and troubleshoot authentication technologies, including SAML, RADIUS, and Multi-Factor Authentication (MFA).Perform advanced troubleshooting across networking, security, routing, authentication, and cloud connectivity domains.Conduct technical workshops, customer training sessions, and knowledge transfer activities.Develop implementation guides, deployment procedures, technical documentation, and migration plans.Collaborate with Technical Assistance Center (TAC), Customer Success, Sales, Project Management, and Professional Services teams.Participate in maintenance windows, migration cutovers, and critical project activities as required.Required Qualifications5+ years of experience in one or more of the following areas:Network SecurityProfessional ServicesTechnical ConsultingNetwork EngineeringSolutions Architecture2+ years of hands-on experience with SASE or cloud-delivered security solutions.Strong hands-on experience with Palo Alto Networks technologies.Experience deploying and supporting Prisma Access.Strong knowledge of:TCP/IPDNSRoutingBGPOSPFIPSecGREPolicy-Based Forwarding (PBF)Experience with GlobalProtect.Experience leading VPN and proxy migration projects.Solid understanding of Zero Trust and SASE architectures.Experience with authentication and identity technologies:SAML 2.0RADIUSMFAMicrosoft Entra ID (Azure AD)OktaExperience with SSL/TLS inspection and certificate management.Strong analytical, troubleshooting, and problem-solving skills.Demonstrated experience working directly with enterprise customers.Advanced English communication skills (written and verbal).Preferred QualificationsPalo Alto Networks certifications such as:PCNSEPCNSAPCCSECCNP, CCIE, JNCIP, JNCIE, or equivalent certifications.Experience with:Prisma SD-WANPanoramaStrata Cloud ManagerPublic cloud experience in AWS, Microsoft Azure, or Google Cloud Platform (GCP).Knowledge of:CASBZTNASWGDLPRBIPython, PowerShell, or other automation/scripting experience.Bachelor's degree in Computer Science, Cybersecurity, Networking, Information Technology, or a related field.What We OfferCompetitive compensation package.Hybrid work model.Opportunity to work with leading enterprise customers across global markets.Exposure to cutting-edge SASE and Zero Trust technologies.Professional development and certification support.Collaborative and highly skilled technical environment.Paid vacation in accordance with Colombian labor regulations.Colombian public holidays.Career growth opportunities within a rapidly growing cybersecurity practice.