Job Description Role: Network Security Architect - Palo Alto Prisma SD-WAN (ION), AWS Remote - Canada Required Skills Networking & SD-WAN * Must know Palo Alto Prisma SD-WAN (ION) - on prime and AWS Strata Cloud Manager (SCM) * Prisma Access * BGP * OSPF * Static Routing * ECMP * IPSec VPN * GRE Tunnels * SD-WAN High Availability (HA) * MPLS * DIA * Broadband Connectivity * Traffic Engineering and Application-Aware Routing ### Cloud * AWS VPC * Transit Gateway * Direct Connect * Route Tables * Security Groups * NACLs * AWS Networking Design * Hybrid Cloud Connectivity ### Security * Palo Alto NGFW * Zero Trust Architecture * SASE/SSE * Segmentation and Security Policies * Identity and Access Management ## Roles & Responsibilities * Design end-to-end Palo Alto Prisma SD-WAN architecture for AWS, branch locations, data centers, and cloud environments. * Develop HLD and LLD documentation for SD-WAN deployments. * Design AWS-hosted ION Virtual Appliance architecture including HA clusters and multi-region resiliency. * Define routing strategies using BGP, static routes, route redistribution, and cloud connectivity models. * Deploy and onboard Prisma SD-WAN ION Virtual Appliances in AWS. * Integrate AWS VPCs, Transit Gateway, and Direct Connect with Prisma SD-WAN fabric. * Configure cloud-to-branch and branch-to-cloud connectivity. * Design secure connectivity for applications hosted in AWS.



### SD-WAN Implementation * Configure ION devices, sites, WAN circuits, and VPN fabrics. * Implement application-aware policies, QoS, and path selection. * Configure WAN overlays and service links. * Execute greenfield and brownfield migrations. * Design active/active and active/standby ION HA clusters. * Plan failover, redundancy, and disaster recovery scenarios. * Validate AWS availability zone resilience and WAN failover mechanisms. ### Integrate Prisma Access and Palo Alto SD-WAN & NGFW * Implement segmentation, secure zones, and security policies. * Ensure compliance with enterprise security standards. * Lead migration from traditional WAN or third-party SD-WAN solutions to Prisma SD-WAN. * Execute cloud migration and data center exit initiatives. * Perform pilot deployments and production cutovers. * Diagnose routing, tunnel, and application performance issues. * Work with Palo Alto TAC for critical incidents and platform bugs. * Optimize application experience and network performance. * Provide L3/L4 engineering support. * Prepare HLD, LLD, MOP, migration runbooks, rollback plans, and SOPs. * Participate in architecture reviews and customer workshops. * Present technical solutions to customers and stakeholders. ## Mandatory Certifications * Palo Alto PCNSA / PCNSE * Palo Alto Prisma SD-WAN Certification (Preferred)

📌 Network Security Architect - Palo Alto Prisma SD-WAN (ION), AWS, PCNSA / PCNSE (Quebec City)
🏢 Astra North Infoteck
📍 Quebec City