Palo Alto Prisma SD-WAN Architect

Palo Alto Prisma SD-WAN (ION) Architect – AWS Cloud

Required Skills

Networking & SD-WAN

• Must know Palo Alto Prisma SD-WAN (ION)- on prime and AWS

• Strata Cloud Manager (SCM)

• Prisma Access

• BGP, OSPF, Static Routing, ECMP

• IPSec VPN, GRE Tunnels

• SD-WAN High Availability (HA)

• MPLS, DIA, Broadband Connectivity

• Traffic Engineering and Application-Aware Routing

Cloud

• AWS VPC, Transit Gateway, Direct Connect

• Route Tables, Security Groups, NACLs

• AWS Networking Design

• Hybrid Cloud Connectivity

Security

• Palo Alto NGFW

• Zero Trust Architecture

• SASE/SSE

• Segmentation and Security Policies

• Identity and Access Management

---

Roles & Responsibilities

Solution Design

• Design end-to-end Palo Alto Prisma SD-WAN architecture for AWS, branch locations, data centers, and cloud environments.

• Develop HLD and LLD documentation for SD-WAN deployments.

• Design AWS-hosted ION Virtual Appliance architecture including HA clusters and multi-region resiliency.

• Define routing strategies using BGP, static routes, route redistribution, and cloud connectivity models.

AWS Deployment

• Deploy and onboard Prisma SD-WAN ION Virtual Appliances in AWS.

• Integrate AWS VPCs, Transit Gateway, and Direct Connect with Prisma SD-WAN fabric.

• Configure cloud-to-branch and branch-to-cloud connectivity.

• Design secure connectivity for applications hosted in AWS.

SD-WAN Implementation

• Configure ION devices, sites, WAN circuits, and VPN fabrics.

• Implement application-aware policies, QoS, and path selection.

• Configure WAN overlays and service links.

• Execute greenfield and brownfield migrations.

High Availability & Disaster Recovery

• Design active/active and active/standby ION HA clusters.

• Plan failover, redundancy, and disaster recovery scenarios.

• Validate AWS availability zone resilience and WAN failover mechanisms.

Security Integration

• Integrate P risma Access and Palo Alto SD-WAN & NGF

• Implement segmentation, secure zones, and security policies.

• Ensure compliance with enterprise security standards.

Migration & Transformation

• Lead migration from traditional WAN or third-party SD-WAN solutions to Prisma SD-WAN.

• Execute cloud migration and data center exit initiatives.

• Perform pilot deployments and production cutovers.

Operations & Troubleshooting

• Diagnose routing, tunnel, and application performance issues.

• Work with Palo Alto TAC for critical incidents and platform bugs.

• Optimize application experience and network performance.

• Provide L3/L4 engineering support.

Documentation & Governance

• Prepare HLD, LLD, MOP, migration runbooks, rollback plans, and SOPs.

• Participate in architecture reviews and customer workshops.

• Present technical solutions to customers and stakeholders.

Mandatory Certifications

• Palo Alto PCNSA / PCNSE

• Palo Alto Prisma SD-WAN Certification (Preferred)

• AWS Solutions Architect Associate / Professional

• CCNP Enterprise (Preferred)

Preferred Experience

• AWS-hosted Prisma SD-WAN ION deployments

• Prisma Access implementation

• Data Center Exit programs

• Multi-cloud networking (AWS/Azure)

• BFSI enterprise environments

• Large-scale SD-WAN migration programs (100+ sites)

Key Deliverables

• AWS-Prisma SD-WAN HLD & LLD

• ION HA Cluster Design

• Routing & Security Architecture

• Migration Strategy and Runbooks

• UAT & Production Deployment

• Knowledge Transfer and Operational Documentation

Salary Range- $100,000-$120,000 a year

#LI-SP3

#LI-VX1

</div

Role: Technical Architect

Desired skills: Network Security - Palo Alto

Experience: 8 - 14 Years

Job function: TECHNOLOGY

Location: Remote, OR

Salary range: $100,000–$120,000

Apply by: 2026-09-22 00:00:00