Skills
Palo Alto Prisma SD-WAN
AWS
Strata Cloud Manager
Prisma Access
BGP
OSPF
Static routing
ECMP
IPSec VPN
GRE tunnels
SD-WAN high availability
MPLS
DIA
Traffic engineering
Application-aware routing
AWS VPC
AWS Transit Gateway
AWS Direct Connect
AWS route tables
AWS security groups
AWS NACLs
AWS networking
Palo Alto NGFW
Zero Trust
SASE/SSE
Network segmentation
Security policies
IAM
Architecture design
HLD/LLD documentation
IPSec
GRE
SASE
SSE
Summary
✨ AI‑Generated
Design end-to-end SD-WAN and cloud networking architectures for branches, data centers, and cloud environments. You will work deeply with enterprise routing, VPNs, high availability, AWS networking, next-generation firewalls, zero-trust security, segmentation, and detailed architecture documentation in a remote contract role.
Highlights
Remote contract architecture role focused on modern SD-WAN and cloud networking, combining Palo Alto security technologies, AWS connectivity, zero-trust architecture, high availability, and enterprise network design.
Description
Role: Palo Alto Prisma SD-WAN (ION) Architect - (AWS-Prisma SD WAN, Palo Alto PCNSA / PCNSE certification)
Location: Remote - Canada
Term: Contract
Required Skills
Networking & SD-WAN
Must know Palo Alto Prisma SD-WAN (ION)- on prime and AWS Strata Cloud Manager (SCM), Prisma Access, BGP, OSPF, Static Routing, ECMP IPSec VPN, GRE Tunnels, SD-WAN High Availability (HA)MPLS| DIA, Broadband Connectivity Traffic Engineering and Application-Aware Routing Cloud AWS VPC, Transit Gateway, Direct Connect, Route Tables, Security Groups, NACLs, AWS Networking Design Hybrid Cloud Connectivity Security Palo Alto NGF WZero Trust Architecture SASE/SSE Segmentation and Security Policies Identity and Access Management
Roles & Responsibilities
Design end-to-end Palo Alto Prisma SD-WAN architecture for AWS, branch locations, data centers, and cloud environments.
Develop HLD and LLD documentation for SD-WAN deployments.
Design AWS-hosted ION Virtual Appliance architecture, including HA clusters and multi-region resiliency.
Define routing strategies using: BGP Static routes Route redistribution Cloud connectivity models Deploy and onboard Prisma SD-WAN ION Virtual Appliances in AWS.
Integrate AWS VPCs, Transit Gateway, and Direct Connect with Prisma SD-WAN fabric.
Configure cloud-to-branch and branch-to-cloud connectivity.
Design secure connectivity for applications hosted in AWS.
SD-WAN Implementation
Configure ION devices, sites, WAN circuits, and VPN fabrics.
Implement application-aware policies, QoS, and path selection.
Configure WAN overlays and service links.
Execute greenfield and brownfield migrations.
Design active/active and active/standby ION HA clusters.
Plan failover, redundancy, and disaster recovery scenarios.
Validate AWS availability zone resilience and WAN failover mechanisms.
Integrate Prisma Access and Palo Alto SD-WAN & NGF.
Implement segmentation, secure zones, and security policies.
Ensure compliance with enterprise security standards.
Lead migration from traditional WAN or third-party SD-WAN solutions to Prisma SD-WAN.
Execute cloud migration and data center exit initiatives.
Perform pilot deployments and production cutovers.
Diagnose routing, tunnel, and application performance issues.
Work with Palo Alto TAC for critical incidents and platform bugs.
Optimize application experience and network performance.
Provide L3/L4 engineering support.
Prepare: HLD LLD MOP Migration runbooks Rollback plans SOPs Participate in architecture reviews and customer workshops.
Present technical solutions to customers and stakeholders.
Mandatory Certifications
Palo Alto PCNSA / PCNSE Palo Alto Prisma SD-WAN Certification (Preferred) AW
