Solution Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, implement, and migrate Palo Alto Networks solutions for enterprise and data center clients.

• Deploy and optimize PA Series, VM Series, CN Series, Cloud NGFW, Panorama, Strata Cloud Manager, and a range of Palo Alto security products.

• Execute data center-scale implementations involving high availability, virtual systems, virtual wire and Layer 3 deployments, segmentation, dynamic routing, and east-west inspection.

• Lead migrations from legacy and competitive firewall platforms, encompassing rule base conversion, policy optimization, cutover planning, and rollback procedures.

• Extend engagements into Prisma Access, Prisma SD-WAN, Cortex, cloud security, and security operations integration.

• Own assigned projects from start to finish, including scope definition, design documentation, build, testing, implementation, validation, and knowledge transfer.

• Manage project timelines and milestones, proactively escalating risks and ensuring delivery commitments are met.

• Serve as the primary customer-facing technical lead for design workshops and technical discovery sessions.

• Present recommendations to engineering teams and executive stakeholders, translating business and security requirements into Palo Alto architectures.

• Produce high-level and low-level designs, as-built records, validation and test results, and operational runbooks.

• Support presales activities, including scoping, estimation, bill of materials validation, and technical responses to customers.

• Develop delivery standards, reference architectures, deployment templates, configuration baselines, and repeatable service offerings.

• Train and mentor engineers while maintaining hands-on lab environments.

• Develop new Palo Alto-based service offerings across SASE, cloud security, and security operations.

• Capture lessons learned from engagements and incorporate them into practice standards.

• Achieve and maintain partner-level certifications with Palo Alto Networks.

• Maintain relationships with Palo Alto Networks systems engineers, channel teams, and distribution partners.

• Monitor PAN-OS releases, product introductions, end-of-life announcements, and changes in the portfolio.

⛳️ Requirements

• A minimum of five years of experience in network security engineering, with at least three years utilizing Palo Alto Networks as the primary platform.

• Experience with partners, resellers, MSSPs, or consulting firms is highly preferred.

• A proven track record of multiple full lifecycle deployments of Palo Alto Networks in enterprise and data center settings.

• Comprehensive proficiency with PAN-OS, including security and NAT policies, decryption, App ID and User ID, threat prevention tuning, high availability design, upgrades, and command line troubleshooting.

• Experience managing Panorama at scale, including templates, device groups, and policy hierarchy.

• Familiarity with Strata Cloud Manager is expected.

• Strong foundational knowledge of data center networking, including BGP and OSPF, VLAN and VRF design, and virtualization platforms such as VMware vSphere, NSX, and Kubernetes.

• Demonstrated migration experience from Cisco, Check Point, Fortinet, and Juniper, focusing on improving the rule base rather than merely replicating it.

• Proven ability to engage with customers, including presenting and defending designs to experienced network and security teams.

• Evidence of ongoing professional investment in the platform, such as maintaining a home lab, actively pursuing certifications, or participating in community events.

• Palo Alto Networks certifications at the Specialist level or higher are strongly preferred.

• Candidates with retired product-coded credentials are encouraged to apply.

• Networking certifications at the CCNP Security, CCNP Enterprise, or CCIE level, or equivalent demonstrated expertise in routing and switching.

• Security certifications such as CISSP, GIAC credentials including GCFW, GCIA, or GSEC, or CompTIA Security+.

• Cloud certification at the associate level or related to VM Series, Cloud NGFW, and Prisma Cloud deployments.

• Proficiency in automation and APIs, such as PAN-OS APIs, Python, Ansible, or Terraform.

• Familiarity with compliance frameworks such as PCI DSS, HIPAA, NIST 800-53, or CMMC.

• Previous experience within a NextWave partner organization.

• Strong technical writing skills, capable of producing design documentation and as-built records for customer operations teams.

• Experience mentoring engineers or delivering formal technical training.

• A bachelor's degree in a technical discipline, or equivalent professional experience.

• Demonstrated experience is prioritized over formal education.

• Must be eligible for employment; Redesign participates in E-Verify.

🏝️ Benefits

• Medical, Dental, and Vision Insurance.

• 401(k) retirement plan with company match (annual dollar cap applies).

• Flexible time-off plan.

• 15 paid holidays.

• Sick leave (amount varies by state requirements, at least the minimum required by any state).

• Short-term and long-term disability.

• Life insurance.

• Paid parental leave.

• Reasonable accommodations throughout the hiring process.