Prisma Engineer

Job Title: Prisma Engineer
Contract Type: 6-Month Contract
Location: Remote

About the Role

We are seeking an experienced Prisma Engineer to join our cybersecurity team on a 6-month remote contract. The successful candidate will be responsible for the design, implementation, administration, and optimisation of Prisma Access and associated security solutions, ensuring secure connectivity and protection for enterprise users, applications, and infrastructure.

The ideal candidate will possess strong expertise in cloud security, network security, Zero Trust architecture, and Palo Alto technologies, with a proven track record of delivering large-scale security solutions in complex environments.

Key Responsibilities

• Design, deploy, configure, and support Palo Alto Prisma Access environments.
• Implement and maintain Secure Access Service Edge (SASE) and Zero Trust security architectures.
• Manage remote user and branch connectivity through Prisma Access.
• Configure and troubleshoot Palo Alto firewalls, security policies, and routing.
• Support cloud security initiatives across Azure, AWS, and GCP environments.
• Monitor security posture and recommend improvements to enhance protection and compliance.
• Perform policy reviews, security assessments, and rule optimisation.
• Integrate Prisma Access with identity providers including Azure AD/Entra ID, Okta, and Active Directory.
• Support VPN migration, network transformation, and cloud adoption projects.
• Troubleshoot complex networking and security incidents.
• Collaborate with infrastructure, networking, security, and cloud teams.
• Produce and maintain technical documentation, implementation guides, and operational procedures.
• Assist with security audits and compliance requirements.

Required Skills & Experience

Palo Alto Technologies

• Strong experience administering:

  • Palo Alto Prisma Access

  • Palo Alto Next-Generation Firewalls (NGFW)
  • Panorama Management
  • GlobalProtect
• Experience managing security policies, NAT, routing, and threat prevention services.
• Hands-on experience with URL Filtering, WildFire, DNS Security, and Threat Prevention.

Networking

• Strong understanding of:

  • TCP/IP

  • DNS
  • DHCP
  • BGP
  • OSPF
  • IPSec VPN
  • SSL/TLS
  • SD-WAN
• Experience troubleshooting enterprise network environments.

Cloud Security

• Experience supporting cloud platforms:

  • Microsoft Azure

  • AWS
  • Google Cloud Platform (GCP)
• Understanding of cloud networking and security best practices.

Identity & Access Management

• Azure Entra ID (Azure AD)
• Active Directory
• Single Sign-On (SSO)
• Multi-Factor Authentication (MFA)
• SAML
• OAuth 2.0

Security Technologies

• Zero Trust Architecture
• Secure Access Service Edge (SASE)
• CASB
• SWG
• DLP
• Security Operations Processes

Essential Experience

• 5+ years of Network Security Engineering experience.
• 3+ years of hands-on Palo Alto Prisma Access experience.
• Proven experience delivering enterprise-scale security projects.
• Experience supporting remote and hybrid workforce security solutions.
• Experience working in Agile and project-based environments.
• Strong stakeholder management and communication skills.

Desirable Certifications

• Palo Alto Networks Certified Network Security Engineer (PCNSE)
• Palo Alto Prisma Access Specialist
• Palo Alto Networks Cybersecurity Certified Associate (PCCSA)
• Microsoft Azure Security Engineer Associate (AZ-500)
• CISSP
• CCNP Security
• CompTIA Security+

Personal Attributes

• Excellent analytical and troubleshooting skills.
• Strong communication and stakeholder engagement capabilities.
• Ability to work independently in a fully remote environment.
• Detail-oriented with a proactive approach to problem-solving.
• Comfortable working in fast-paced and complex enterprise environments.

Deliverables

• Successful deployment and optimisation of Prisma Access solutions.
• Secure and resilient remote access infrastructure.
• Improved security posture through policy and architecture enhancements.
• Comprehensive technical documentation and handover materials.
• Timely resolution of complex security and network issues.