Network Security & SASE Architect – Palo Alto Networks Senior Manager

Job description

Accenture OverviewWe are a global collective of innovators applying the New every day to improve the way the world works and lives. Help us show the world what’s possible as you partner with clients to unlock hidden value and deliver innovative solutions. Empowered with innovative tools, continuous learning, and a global community of diverse talent and perspectives, we drive success in a new business architecture that disrupts conventional practices. Our expertise spans 40+ industries across 120+ countries and impacts millions of lives every day. We turn ideas into reality. We AreAccenture Security helps organizations prepare, protect, detect, respond and recover along all points of the security lifecycle. Cybersecurity challenges are different for every business in every industry. Leveraging our global resources and advanced technologies, we create integrated, turnkey solutions tailored to our clients’ needs across their entire value chain. Whether we’re defending against known cyberattacks, detecting and responding to the unknown, or running an entire security operations center, we will help companies build cyber resilience to grow with confidence. Our team of the security sector’s brightest people use the coolest tech to out-hack the hackers and help clients build resilience from within. We blend risk strategy, digital identity, cyber defense, application security and managed service solutions to rethink the entire security lifecycle. You AreSecurity and Risk professionals develop and deliver solutions that protect enterprise systems, applications and data by establishing policies, practices and tools that prevent unauthorized access, use, disclosure, modification or disruption. A professional at this position level within Accenture has the following responsibilities: Provides solutions to complex business problems for area(s) of responsibility where analysis of situations requires an in depth knowledge of organizational objectives. Involved in setting strategic direction to establish near term goals for area of responsibility. Interacts with senior management levels at a client and/or within Accenture, which involves negotiating or influencing on significant matters. Has latitude in decision-making and determining objectives and approaches to critical assignments. Decisions have a lasting impact on area of responsibility with the potential to impact outside area of responsibility. Manages large teams and/or work efforts (if in an individual contributor role) at a client or within Accenture. We are looking for a Security Professional for our Security practice who is a recognized Palo Alto Networks network security architect. You have personally designed, deployed and troubleshot PAN-OS Next-Generation Firewalls, Prisma Access and Panorama / Strata Cloud Manager at enterprise scale, and you have grown into leading the sale, solutioning and delivery of network security transformation programs. You are equally credible whiteboarding a target-state architecture with a client’s network and security architects, leading a root-cause analysis on a production outage, and presenting the business case to the CISO or CIO. The Work (Key Responsibilities)Business leadership and growth Originate, shape and sell network security, Zero Trust and SASE transformation programs built on Palo Alto Networks; lead proposal development, solution and effort estimation, commercial structuring and orals, and carry sales and delivery targets for your area of responsibility. Act as the trusted advisor to client CISOs, CIOs and heads of network and security; translate network security architecture choices into business outcomes, risk reduction and cost cases that executives can act on. Build and grow Accenture’s Palo Alto Networks network security capability: co-sell and co-deliver with Palo Alto Networks account, Solutions Consulting and channel teams, and develop offerings, reference architectures, estimating models and accelerators. Represent Accenture as an expert at industry conferences, partner events and client briefings, and publish points of view on NGFW modernization, SASE and Zero Trust. Architecture, solutioning and design Own the end-to-end solution architecture for network security programs: current-state assessment, target-state design, roadmap, bill of materials, sizing and licensing across data center, campus, branch, public cloud and remote users. Lead high-level and low-level design (HLD/LLD) for Palo Alto Networks Next-Generation Firewall deployments (PA-Series, VM-Series, CN-Series and Cloud NGFW): zone and segmentation design, App-ID, User-ID and Content-ID policy design, SSL/TLS decryption, Cloud-Delivered Security Services (Advanced Threat Prevention, Advanced URL Filtering, Advanced WildFire, Advanced DNS Security), high availability and performance sizing. Architect Prisma Access (SASE/SSE) deployments: Mobile Users (GlobalProtect and explicit proxy), Remote Networks, Service Connections, traffic steering and routing, ZTNA, identity integration (Cloud Identity Engine, Okta, Microsoft Entra ID, SAML/SCIM), SaaS Security, Enterprise DLP, Prisma Browser (formerly Prisma Access Browser) and Autonomous Digital Experience Management (ADEM), including migrations from legacy VPN and on-premises proxy platforms. Define the management and operating model: Panorama design (device groups, templates and template stacks, log collectors, high availability) and Strata Cloud Manager for cloud-managed NGFW and Prisma Access, including Panorama to Strata Cloud Manager migration, policy optimization, best-practice assessment and AIOps adoption, plus Strata Logging Service and SIEM/XSIAM integration. Lead firewall consolidation and migration programs from Check Point, Cisco ASA/Firepower, Fortinet, Juniper and other platforms to Palo Alto Networks: policy rationalization and cleanup, object and rule migration tooling, cutover planning and rollback. Design the surrounding enterprise network: routing (BGP, OSPF), IPsec VPN and SD-WAN (Prisma SD-WAN, SD-WAN for NGFW), NAT, DNS, load balancing, hybrid and multi-cloud connectivity (AWS, Azure, GCP) and macro/micro-segmentation aligned to Zero Trust principles (NIST SP 800-207, CISA Zero Trust Maturity Model). Review and approve designs produced by the team; set design standards, naming conventions and security policy best practices. Delivery and operations leadership Lead delivery of multi-workstream programs across onshore and global delivery teams: plan, estimate, staff and manage scope, schedule, budget, risk and quality so client deliverables are produced on time and to Accenture project quality specifications. Serve as the highest point of technical escalation: lead root-cause analysis for complex issues across PAN-OS firewalls, Panorama / Strata Cloud Manager, GlobalProtect, Prisma Access, routing, IPsec tunnels, decryption, HA failover and performance degradation, using packet captures, session and flow analysis, global counters and the PAN-OS CLI. Lead the transition of clients into Accenture Network Managed Services: define runbooks, SLAs and KPIs, monitoring and change processes, and ensure a clean handover from build to run. Produce client-ready documentation: architecture decision records, HLD/LLD, migration and test plans, and executive readouts. Interpret the relevance of network security controls to legal, regulatory and framework requirements (NIST CSF and SP 800-53, ISO 27001, PCI DSS, HIPAA, SOX) within the designs you deliver. People and practice development Build, lead and grow a team of network security architects and engineers: recruit, mentor, set Palo Alto Networks certification paths and run design reviews that raise the team’s technical bar. Develop reusable assets: deployment templates, automation (Terraform, Ansible, PAN-OS APIs), migration playbooks, lab environments and demos. Take initiative to communicate, interact and collaborate with Accenture cloud, network, SOC and identity teams so that al