[Remote] Network Security Engineer (Palo Alto SASE / Prisma Access)

Note: The job is a remote job and is open to candidates in USA. Triune Infomatics Inc is seeking a Network Security Engineer to work as an embedded extension of an unnamed client’s network security team. The role supports deployment, optimization, and operation of the client’s Palo Alto Networks SASE environment, including Prisma Access, security policies, troubleshooting, migration, and incident response.

Responsibilities

• Support the deployment, configuration, and refinement of Prisma Access for remote networks, mobile users, and campus connectivity, including service connections, IPsec tunnels, and routing
• Refine CASB (SaaS Security) policies to govern sanctioned and unsanctioned applications, protect sensitive data, and reduce shadow IT and data loss risk
• Support the development and maintenance of security policy, URL filtering, decryption, and threat prevention profiles suited to the openness requirements of an academic environment
• Administer and operate the environment through Strata Cloud Manager (SCM) and Panorama, ensuring consistent configuration, policy, and visibility across cloud and on premises firewalls
• Open, escalate, and manage Palo Alto Networks TAC cases through to resolution, including gathering logs and tech support files, documenting reproduction steps, setting appropriate severity, and coordinating with TAC engineers and internal stakeholders
• Support migration from legacy VPN and firewall architectures to a SASE model with minimal disruption to the academic calendar, working directly with end users and troubleshooting issues
• Monitor logs, alerts, and user experience metrics; perform root cause analysis and recommend remediation
• Participate in change management, maintenance windows, and incident response

Skills

• Demonstrated hands on experience with Palo Alto Networks SASE, specifically Prisma Access, Prisma Browser, and CASB
• Working familiarity with Strata Cloud Manager (SCM) for configuration, monitoring, and troubleshooting
• Proven ability to submit and manage TAC cases through the Palo Alto Networks Customer Support Portal, including effective escalation and follow through
• Strong foundation in networking and security: routing, VPN, DNS, TLS inspection, identity based access, and zero trust principles
• Experience troubleshooting complex connectivity and policy issues across hybrid environments
• Clear written and verbal communication, with the ability to work independently and collaborate with technical and non technical stakeholders
• Experience with Cloud Identity Engine (CIE) and integration with identity providers such as Entra ID, Okta, and Shibboleth/SAML
• Experience with Panorama for centralized management and policy orchestration
• Prior work in higher education or other large, open network environments
• Palo Alto Networks certifications such as PCNSE, PCNSA, or SASE specific credentials
• Familiarity with data privacy and compliance frameworks relevant to higher education, including FERPA, HIPAA for research and medical units, and NIST 800-171 for research data

Benefits

• Remote work

Company Overview

Company H1B Sponsorship