SASE Security Consultant (Palo Alto Networks)

About the role

We are seeking an experienced SASE Professional Services Consultant to join our Professional Services team in Medellín, Colombia. In this customer‑facing role you will design, deploy, migrate and optimise enterprise SASE environments, helping customers adopt secure, scalable, cloud‑delivered security architectures.

Key responsibilities

• Design and implement enterprise SASE architectures, including Prisma Access for mobile users, remote networks and service connections.
• Deploy, configure and optimise Prisma Access, Prisma SD‑WAN, and related security policies, traffic steering and URL filtering.
• Lead migrations from traditional VPN, proxy and on‑premise security solutions to cloud‑delivered SASE platforms.
• Configure, test and troubleshoot IPSec and GRE tunnels, routing protocols (BGP, OSPF, Policy‑Based Forwarding) and authentication technologies (SAML, RADIUS, MFA).
• Integrate SASE solutions with identity providers such as Microsoft Entra ID (Azure AD) and Okta.
• Conduct technical workshops, customer training, knowledge‑transfer sessions and produce implementation guides and migration plans.
• Collaborate with TAC, Customer Success, Sales, Project Management and Professional Services teams during maintenance windows and critical project activities.

Required profile

• 5+ years of experience in network security, professional services, technical consulting, network engineering or solutions architecture.
• 2+ years of hands‑on experience with SASE or cloud‑delivered security solutions.
• Strong hands‑on experience with Palo Alto Networks technologies, especially Prisma Access.
• Solid understanding of Zero Trust and SASE architectures.
• Proven ability to lead VPN and proxy migration projects.
• Excellent analytical, troubleshooting and problem‑solving skills.

Required skills

• Palo Alto Networks – Prisma Access, GlobalProtect
• Networking protocols – TCP/IP, DNS, BGP, OSPF, IPSec, GRE, Policy‑Based Forwarding
• SD‑WAN – Prisma SD‑WAN
• Security – URL filtering, SSL/TLS inspection, certificate management
• Identity & Access – SAML 2.0, RADIUS, Multi‑Factor Authentication, Microsoft Entra ID (Azure AD), Okta