Palo Alto Prisma SD-WAN (ION) Architect – AWS Cloud
Required Skills
Networking & SD-WAN
•Must know Palo Alto Prisma SD-WAN (ION)- on prime and AWS
•Strata Cloud Manager (SCM)
•Prisma Access
•BGP, OSPF, Static Routing, ECMP
•IPSec VPN, GRE Tunnels
•SD-WAN High Availability (HA)
•MPLS, DIA, Broadband Connectivity
•Traffic Engineering and Application-Aware Routing
Cloud
•AWS VPC, Transit Gateway, Direct Connect
•Route Tables, Security Groups, NACLs
•AWS Networking Design
•Hybrid Cloud Connectivity
Security
•Palo Alto NGFW
•Zero Trust Architecture
•SASE/SSE
•Segmentation and Security Policies
•Identity and Access Management
________________________________________
Roles & Responsibilities
Solution Design
•Design end-to-end Palo Alto Prisma SD-WAN architecture for AWS, branch locations, data centers, and cloud environments.
•Develop HLD and LLD documentation for SD-WAN deployments.
•Design AWS-hosted ION Virtual Appliance architecture including HA clusters and multi-region resiliency.
•Define routing strategies using BGP, static routes, route redistribution, and cloud connectivity models.
AWS Deployment
•Deploy and onboard Prisma SD-WAN ION Virtual Appliances in AWS.
•Integrate AWS VPCs, Transit Gateway, and Direct Connect with Prisma SD-WAN fabric.
•Configure cloud-to-branch and branch-to-cloud connectivity.
•Design secure connectivity for applications hosted in AWS.
SD-WAN Implementation
•Configure ION devices, sites, WAN circuits, and VPN fabrics.
•Implement application-aware policies, QoS, and path selection.
•Configure WAN overlays and service links.
•Execute greenfield and brownfield migrations.
High Availability & Disaster Recovery
•Design active/active and active/standby ION HA clusters.
•Plan failover, redundancy, and disaster recovery scenarios.
•Validate AWS availability zone resilience and WAN failover mechanisms.
Security Integration
•Integrate P risma Access and Palo Alto SD-WAN & NGF
•Implement segmentation, secure zones, and security policies.
•Ensure compliance with enterprise security standards.
Migration & Transformation
•Lead migration from traditional WAN or third-party SD-WAN solutions to Prisma SD-WAN.
•Execute cloud migration and data center exit initiatives.
•Perform pilot deployments and production cutovers.
Operations & Troubleshooting
•Diagnose routing, tunnel, and application performance issues.
•Work with Palo Alto TAC for critical incidents and platform bugs.
•Optimize application experience and network performance.
•Provide L3/L4 engineering support.
Documentation & Governance
•Prepare HLD, LLD, MOP, migration runbooks, rollback plans, and SOPs.
•Participate in architecture reviews and customer workshops.
•Present technical solutions to customers and stakeholders.
Mandatory Certifications
•Palo Alto PCNSA / PCNSE
•Palo Alto Prisma SD-WAN Certification (Preferred)
•AWS Solutions Architect Associate / Professional
•CCNP Enterprise (Preferred)
Preferred Experience
•AWS-hosted Prisma SD-WAN ION deployments
•Prisma Access implementation
•Data Center Exit programs
•Multi-cloud networking (AWS/Azure)
•BFSI enterprise environments
•Large-scale SD-WAN migration programs (100+ sites)
Key Deliverables
•AWS-Prisma SD-WAN HLD & LLD
•ION HA Cluster Design
•Routing & Security Architecture
•Migration Strategy and Runbooks
•UAT & Production Deployment
•Knowledge Transfer and Operational Documentation
Salary Range- $100,000-$120,000 a year
#LI-SP3
#LI-VX1
More Information
Application Details
- Organization DetailsTCS / Tata Consultancy Services
Recommended Comments
There are no comments to display.
Join the conversation
You are posting as a guest. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.