SASE Implementation Engineer

REQUIREMENT SUMMARY

- Role: SASE Implementation Engineer – Specialist Level III

- End Client: CUNY – Computing and Information Services

- Location: 395 Hudson Street, 6th Floor, New York, NY 10014 (Hybrid: minimum 2 days onsite per week, rest remote)

- Positions: 1

- Duration: 12 months

- Anticipated Start: Around November 4, 2026 

- Hours: 8 AM – 5 PM EST, 40 hours/week

PROJECT OVERVIEW

CUNY is deploying Palo Alto Networks Prisma Access to strengthen secure remote connectivity and modernize its network security architecture. The engineer will lead end-to-end technical delivery: architecture support, configuration, integration, migration, testing, troubleshooting, production validation, operational transition and adoption. The role involves coordinating with central IT, vendors and stakeholders across 25 colleges.

KEY RESPONSIBILITIES

• - Lead Prisma Access architecture, configuration, integration, migration, testing and production readiness
• - Coordinate implementation across infrastructure, network, security and vendor teams
• - Analyze and troubleshoot technical issues; manage resolution and escalation
• - Prepare architecture/configuration documentation, procedures, status reports and executive updates
• - Drive transition to operations, knowledge transfer and training for CUNY staff

TECHNICAL ENVIRONMENT

Prisma Access, Strata Cloud Manager, Panorama, PAN-OS (GUI and CLI), GlobalProtect, Prisma Access ADEM, routing/VPN diagnostic tools, Wireshark, Splunk or Microsoft Sentinel, ServiceNow, MS Project, Visio, PowerShell, Python, Ansible, Terraform, Git, Teams, SharePoint.

MANDATORY QUALIFICATIONS (Pass/Fail – the resume must clearly show each of these)

1. Production implementation: At least one completed production SASE or enterprise network-security implementation as technical lead or primary implementation engineer, with platform, scope, responsibilities, outcome and a client/employer reference.

2. Prisma Access: Hands-on deployment, configuration, administration and troubleshooting through Strata Cloud Manager, covering mobile users, remote networks, service connections and production validation.

3. Network security: PAN-OS, Panorama, GlobalProtect, routing, VPN, authentication, security policy, logging, monitoring and HA/resilient network design.

4. Deployment lifecycle: Architecture validation, migration planning, integration, testing, defect resolution, production readiness, cutover and operational handoff.

5. Automation: Use of APIs, PowerShell, Python, Ansible, Terraform, Git or similar to automate configuration, validation, reporting or deployment.

6. Technical program delivery: Ownership of integrated schedules, dependencies, risks, issues, change control, stakeholder coordination and status reporting.

7. Documentation and knowledge transfer: Architecture diagrams, configuration standards, migration procedures, test evidence, runbooks and KT materials produced by the candidate.

8. Certifications (scored, not pass/fail): Current Palo Alto Networks (e.g., PCNSE), networking, security or PM certifications are a strong plus; copies required if claimed.

WHAT TO SUBMIT

- Updated resume (tailored to the mandatory qualifications above)

- Short project narrative for the primary Prisma Access/SASE implementation

- Copies of certifications claimed

- Two professional references (at least one client/employer from the cited implementation)

- Candidate full name, current location, work authorization, availability/notice period

- Confirmation the candidate can work onsite at 395 Hudson St, NYC at least 2 days a week

- Best all-inclusive hourly rate

- Candidate must be willing to undergo background screening as directed by CUNY