Solution Engineer, Palo Alto Networks

About Redesign Group

The Redesign Group is a global technology and cybersecurity Solution Provider leveraging design thinking, interdependent subject matter expertise, and emerging technology solutions to help organizations achieve meaningful transformation. Our globally diverse team members, partnerships with strategic technology manufacturers, and cybersecurity services position us to be a business partner that’s ready for what’s next.

We live by our core values of operating in the service of others, being problem solvers, and focusing on long term partnerships. You’ll excel at Redesign if you thrive in a rewarding environment that moves quickly, challenges you to grow and fosters collaboration. We seek candidates with a hands-on customer-first approach, robust interpersonal and communication skills, strong work ethic and excellent time management. While teamwork is expected, the ability to work independently in a fast-paced environment is crucial.

Job Description
The Redesign Group is seeking a Solution Engineer with a specialty and obsession with Palo Alto Networks and the products within the Palo Alto family. We are looking for an engineer who has developed genuine depth across the product family and who is prepared to serve as the senior technical authority for Palo Alto delivery at Redesign.

This position also carries a practice development mandate. The Solution Engineer will advance the maturity of the Redesign Palo Alto practice through the development of delivery standards and reference architectures, the training and mentorship of fellow engineers, the creation of new service offerings, and the achievement of partner level certifications that support the firm's standing within the Palo Alto Networks partner ecosystem.

Key Responsibilities

Solution Implementation and Delivery

• Design, implement, and migrate Palo Alto Networks solutions for enterprise and data center customers, encompassing PA Series hardware next generation firewalls, VM Series and CN Series software firewalls, Cloud NGFW, and centralized management through Panorama and Strata Cloud Manager.
• Deploy and optimize the broader Palo Alto product family, including Cloud Delivered Security Services (Advanced Threat Prevention, Advanced WildFire, Advanced URL Filtering, and Advanced DNS Security), Enterprise Data Loss Prevention, IoT and OT Security, GlobalProtect, SSL and TLS decryption, and the App ID, User ID, Content ID, and Device ID technologies.
• Execute data center scale implementations, including high availability configurations, multiple virtual systems, virtual wire and Layer 3 deployments, zone based segmentation, dynamic routing integration, and east to west inspection across virtualized and containerized workloads.
• Lead migrations from legacy and competitive firewall platforms to Palo Alto Networks, including rule base conversion, policy optimization, cutover planning, and documented rollback procedures.
• Extend engagements into adjacent portfolio areas as customer requirements dictate, including Prisma Access and Prisma SD WAN for secure access service edge outcomes, and the Cortex platform for security operations integration.

Project and Customer Ownership

• Assume end to end ownership of assigned projects, covering scope definition, design documentation, build, test planning, implementation, validation, and knowledge transfer.
• Own project timelines and milestones, managing schedules proactively, escalating risk in advance of impact, and maintaining delivery commitments with limited oversight.
• Serve as the primary customer facing technical lead, conducting design workshops and technical discovery sessions, presenting recommendations to both engineering teams and executive stakeholders, and translating business and security requirements into defensible Palo Alto architectures.
• Produce complete engagement documentation, including high level and low level designs, as built records, validation and test results, and operational runbooks suitable for customer handover.
• Support pre sales activity as required, contributing to scoping, level of effort estimation, bill of materials validation, and technical responses to customer inquiries.

Practice Maturity and Development

• Advance the maturity of the Redesign Palo Alto practice through the development of delivery standards, reference architectures, deployment templates, configuration baselines, and repeatable service offerings.
• Train and mentor Redesign engineers across Palo Alto technologies, delivering internal enablement sessions and maintaining lab environments that support hands on skill development.
• Develop new Palo Alto based service offerings as the vendor portfolio evolves, with particular attention to opportunities beyond the firewall in secure access service edge, cloud security, and security operations.
• Contribute to continuous improvement of delivery methodology by capturing lessons learned from each engagement and incorporating them into practice standards.

Partner Certification and Ecosystem Engagement

• Achieve and maintain Palo Alto Networks partner level certifications in support of Redesign's NextWave partner standing and specialization attainment.
• Establish and maintain working relationships with Palo Alto Networks systems engineers, channel teams, and distribution partners.
• Monitor PAN OS releases, new product introductions, end of life announcements, and portfolio changes, communicating relevant developments to the practice and to customers.

Required Experience and Background
You will bring hands on delivery experience with the Palo Alto Networks platform:

• A minimum of five years of experience in network security engineering, including at least three years with Palo Alto Networks as the primary platform. Partner, reseller, MSSP, or consulting experience is strongly preferred.
• A demonstrated record of multiple full lifecycle Palo Alto Networks deployments in enterprise and data center environments.
• Comprehensive PAN OS proficiency, including security and NAT policy, decryption, App ID and User ID, threat prevention tuning, high availability design, upgrades, and command line troubleshooting.
• Experience administering Panorama at scale, including templates, device groups, and policy hierarchy. Familiarity with Strata Cloud Manager is expected.
• Strong underlying data center networking fundamentals, including BGP and OSPF, VLAN and VRF design, and virtualization platforms such as VMware vSphere, NSX, and Kubernetes.
• Demonstrated migration experience from Cisco, Check Point, Fortinet, and Juniper, improving the rule base rather than copying it.
• Proven customer facing capability, including presenting and defending designs to experienced network and security teams.
• Evidence of sustained professional investment in the platform, such as a home lab, active certification pursuit, or community participation.
• Palo Alto Networks Certifications, Current Role Based Program
  Palo Alto Networks transitioned to a role based certification framework during 2024 and 2025, comprising four levels (Foundational, Professional, Specialist, and Architect) across the Network Security, Security Operations, and Cloud Security tracks. Credentials at the Specialist level or above are strongly preferred.
• Palo Alto Networks Certifications, Legacy Program
  Candidates holding the retired product coded credentials are encouraged to apply. These certifications remain credible evidence of platform depth, and Redesign will support transition to the current framework.

Complementary Technical Qualifications

• Networking certification at the CCNP Security, CCNP Enterprise, or CCIE level, or equivalent demonstrated routing and switching expertise.
• Security certification such as CISSP, GIAC credentials including GCFW, GCIA, or GSEC, or CompTIA Security Plus.
• Cloud certification at the associate level or relevant to VM Series, Cloud NGFW, and Prisma Cloud deployments.
• Automation and application programming interface proficiency, such as the PAN OS APIs, Python, Ansible, or Terraform.
• Working familiarity with compliance frameworks such as PCI DSS, HIPAA, NIST 800 53, or CMMC.
• Prior experience within a NextWave partner organization.

Professional Qualifications

• Strong technical writing ability, producing design documentation and as built records that customer operations teams can use directly.
• Experience mentoring engineers or delivering formal technical training.
• Bachelor's degree in a technical discipline, or equivalent professional experience. Demonstrated experience is weighted more heavily than formal education.

Benefits

We offer a comprehensive benefits package which may include:

• Medical, Dental, and Vision Insurance
• 401(k) retirement plan with company match (annual dollar cap applied)
• Flexible time off plan
• 15 paid holidays
• Sick leave (amount varies by state requirements and is at least the minimum required by any state)
• Short-term and long-term disability
• Life insurance
• Paid parental leave

We’re an Equal Opportunity and Affirmative Action Employer and welcome applicants from all backgrounds. We consider qualified candidates without regard to any legally protected status. This role is subject to applicable employment laws based on work location. In compliance with pay transparency laws, the compensation range for this role is included, with final pay based on experience, skills, and location. We participate in E-Verify to confirm employment eligibility and are happy to provide reasonable accommodations throughout the hiring process—just let us know how we can help.