Security Engineer / Architect | Palo Alto Prisma, Strata Cloud Manager, Zscaler Migration
Contract: 6 months
Rate: £750 per day
IR35: Inside IR35
Location: Remote-led / flexible
The Opportunity
A leading organisation is looking for a hands-on Security Engineer / Architect to support a major network modernisation programme, with a specific focus on the secure access workstream.
The role is centred around Palo Alto Prisma / Strata Cloud Manager, where security policies are managed, and will involve supporting a large-scale brownfield migration from Zscaler. This is a complex enterprise environment covering circa 30,000 users and hundreds of sites, with policies applied across multiple business areas.
This is not a pure delivery or ticket-based role. The successful candidate will be expected to help shape design decisions, build and adapt security policies, challenge where needed, and clearly translate technical detail for non-technical stakeholders.
Key Responsibilities
- Design, build and adapt security policies within Palo Alto Prisma / Strata Cloud Manager
- Support a brownfield migration from Zscaler into the Palo Alto environment
- Work across policy areas including DLP, file control, URL filtering and proxy policies
- Review and adapt existing Zscaler configurations where appropriate
- Help make practical design decisions during the migration
- Translate technical security detail for non-technical stakeholders
- Escalate risks, blockers and technical issues clearly to senior stakeholders
- Prioritise workload effectively and push back when required
- Support a product-style delivery model, working through sprints and defined programme milestones
- Contribute to post-migration BAU, optimisation and continuous improvement
Key Requirements
- Strong hands-on experience with Palo Alto Prisma / Strata Cloud Manager
- Direct experience with Palo Alto / Strata migration activity
- Practical knowledge of security policy design and implementation
- Experience supporting migrations from Zscaler would be highly beneficial
- Strong understanding of secure access, SASE-style environments and policy-based controls
- Experience working in large-scale enterprise environments
- Ability to communicate clearly with senior stakeholders, including Director / C-level audiences
- Comfortable working to fixed deadlines in a commercially pressured programme
- Terraform / Infrastructure as Code experience would be useful, but is not essential
- Firewall and VPN experience is beneficial, but not essential
Ideal Profile
This role is best suited to a hybrid network/security engineer or architect who has delivered hands-on policy work across Palo Alto Prisma / Strata Cloud Manager, ideally as part of a migration from Zscaler.
The client is not looking for a generic network engineer or someone with light training exposure. They need someone who can design, build, adapt and explain security policies in a complex brownfield environment, while helping the team meet a hard programme deadline
…