Palo Alto Prisma SD-WAN Architect

Palo Alto Prisma SD-WAN (ION) Architect - AWS Cloud

Required Skills

Networking & SD-WAN

• Must know Palo Alto Prisma SD-WAN (ION)- on prime and AWS
• Strata Cloud Manager (SCM)
• Prisma Access
• BGP, OSPF, Static Routing, ECMP
• IPSec VPN, GRE Tunnels
• SD-WAN High Availability (HA)
• MPLS, DIA, Broadband Connectivity
• Traffic Engineering and Application-Aware Routing

Cloud

• AWS VPC, Transit Gateway, Direct Connect
• Route Tables, Security Groups, NACLs
• AWS Networking Design
• Hybrid Cloud Connectivity

Security

• Palo Alto NGFW
• Zero Trust Architecture
• SASE/SSE
• Segmentation and Security Policies
• Identity and Access Management

____

Roles & Responsibilities

Solution Design

• Design end-to-end Palo Alto Prisma SD-WAN architecture for AWS, branch locations, data centers, and cloud environments.
• Develop HLD and LLD documentation for SD-WAN deployments.
• Design AWS-hosted ION Virtual Appliance architecture including HA clusters and multi-region resiliency.
• Define routing strategies using BGP, static routes, route redistribution, and cloud connectivity models.

AWS Deployment

• Deploy and onboard Prisma SD-WAN ION Virtual Appliances in AWS.
• Integrate AWS VPCs, Transit Gateway, and Direct Connect with Prisma SD-WAN fabric.
• Configure cloud-to-branch and branch-to-cloud connectivity.
• Design secure connectivity for applications hosted in AWS.

SD-WAN Implementation

• Configure ION devices, sites, WAN circuits, and VPN fabrics.
• Implement application-aware policies, QoS, and path selection.
• Configure WAN overlays and service links.
• Execute greenfield and brownfield migrations.

High Availability & Disaster Recovery

• Design active/active and active/standby ION HA clusters.
• Plan failover, redundancy, and disaster recovery scenarios.
• Validate AWS availability zone resilience and WAN failover mechanisms.

Security Integration

• Integrate P risma Access and Palo Alto SD-WAN & NGF
• Implement segmentation, secure zones, and security policies.
• Ensure compliance with enterprise security standards.

Migration & Transformation

• Lead migration from traditional WAN or third-party SD-WAN solutions to Prisma SD-WAN.
• Execute cloud migration and data center exit initiatives.
• Perform pilot deployments and production cutovers.

Operations & Troubleshooting

• Diagnose routing, tunnel, and application performance issues.
• Work with Palo Alto TAC for critical incidents and platform bugs.
• Optimize application experience and network performance.
• Provide L3/L4 engineering support.

Documentation & Governance

• Prepare HLD, LLD, MOP, migration runbooks, rollback plans, and SOPs.
• Participate in architecture reviews and customer workshops.
• Present technical solutions to customers and stakeholders.

Mandatory Certifications

• Palo Alto PCNSA / PCNSE
• Palo Alto Prisma SD-WAN Certification (Preferred)
• AWS Solutions Architect Associate / Professional
• CCNP Enterprise (Preferred)

Preferred Experience

• AWS-hosted Prisma SD-WAN ION deployments
• Prisma Access implementation
• Data Center Exit programs
• Multi-cloud networking (AWS/Azure)
• BFSI enterprise environments
• Large-scale SD-WAN migration programs (100+ sites)

Key Deliverables

• AWS-Prisma SD-WAN HLD & LLD
• ION HA Cluster Design
• Routing & Security Architecture
• Migration Strategy and Runbooks
• UAT & Production Deployment
• Knowledge Transfer and Operational Documentation

Salary Range- $100,000-$120,000 a year

#LI-SP3

#LI-VX1