Architect Prisma Access (SASE/SSE) deployments: Mobile Users (GlobalProtect and explicit proxy), Remote Networks, Service Connections, traffic steering and routing, ZTNA, identity integration (Cloud Identity Engine, Okta, Microsoft Entra ID, SAML/SCIM), SaaS Security, Enterprise DLP, Prisma Browser (formerly Prisma Access Browser) and Autonomous Digital Experience Management (ADEM), including migrations from legacy VPN and on-premises proxy platforms. Lead high-level and low-level design (HLD/LLD) for Palo Alto Networks Next-Generation Firewall deployments (PA-Series, VM-Series, CN-Series and Cloud NGFW): zone and segmentation design, App-ID, User-ID and Content-ID policy design, SSL/TLS decryption, Cloud-Delivered Security Services (Advanced Threat Prevention, Advanced URL Filtering, Advanced WildFire, Advanced DNS Security), high availability and performance sizing.