SASE Implementation Engineer

REQUIREMENT SUMMARY- Role: SASE Implementation Engineer – Specialist Level III- End Client: CUNY – Computing and Information Services- Location: 395 Hudson Street, 6th Floor, New York, NY 10014 (Hybrid: minimum 2 days onsite per week, rest remote)- Positions: 1- Duration: 12 months- Anticipated Start: Around November 4, 2026- Hours: 8 AM – 5 PM EST, 40 hours/week

Not sure what skills you will need for this opportunity Simply read the full description below to get a complete picture of candidate requirements.
PROJECT OVERVIEWCUNY is deploying Palo Alto Networks Prisma Access to strengthen secure remote connectivity and modernize its network security architecture. The engineer will lead end-to-end technical delivery: architecture support, configuration, integration, migration, testing, troubleshooting, production validation, operational transition and adoption. The role involves coordinating with central IT, vendors and stakeholders across 25 colleges.
KEY RESPONSIBILITIES- Lead Prisma Access architecture, configuration, integration, migration, testing and production readiness- Coordinate implementation across infrastructure, network, security and vendor teams- Analyze and troubleshoot technical issues; manage resolution and escalation- Prepare architecture/configuration documentation, procedures, status reports and executive updates- Drive transition to operations, knowledge transfer and training for CUNY staff
TECHNICAL ENVIRONMENTPrisma Access, Strata Cloud Manager, Panorama, PAN-OS (GUI and CLI), GlobalProtect, Prisma Access ADEM, routing/VPN diagnostic tools, Wireshark, Splunk or Microsoft Sentinel, ServiceNow, MS Project, Visio, PowerShell, Python, Ansible, Terraform, Git, Teams, SharePoint.
MANDATORY QUALIFICATIONS (Pass/Fail – the resume must clearly show each of these)1. Production implementation: At least one completed production SASE or enterprise network-security implementation as technical lead or primary implementation engineer, with platform, scope, responsibilities, outcome and a client/employer reference.2. Prisma Access: Hands-on deployment, configuration, administration and troubleshooting through Strata Cloud Manager, covering mobile users, remote networks, service connections and production validation.3. Network security: PAN-OS, Panorama, GlobalProtect, routing, VPN, authentication, security policy, logging, monitoring and HA/resilient network design.4. Deployment lifecycle: Architecture validation, migration planning, integration, testing, defect resolution, production readiness, cutover and operational handoff.5. Automation: Use of APIs, PowerShell, Python, Ansible, Terraform, Git or similar to automate configuration, validation, reporting or deployment.6. Technical program delivery: Ownership of integrated schedules, dependencies, risks, issues, change control, stakeholder coordination and status reporting.7. Documentation and knowledge transfer: Architecture diagrams, configuration standards, migration procedures, test evidence, runbooks and KT materials produced by the candidate. xzbcwsv 8. Certifications (scored, not pass/fail): Current Palo Alto Networks (e.g., PCNSE), networking, security or PM certifications are a strong plus; copies required if claimed.
WHAT TO SUBMIT- Updated resume (tailored to the mandatory qualifications above)- Short project narrative for the primary Prisma Access/SASE implementation- Copies of certifications claimed- Two professional references (at least one client/employer from the cited implementation)- Candidate full name, current location, work authorization, availability/notice period- Confirmation the candidate can work onsite at 395 Hudson St, NYC at least 2 days a week- Best all-inclusive hourly rate- Candidate must be willing to undergo background screening as directed by CUNY