Security Engineer

Security Engineer | Palo Alto Prisma, Strata Cloud Manager, Zscaler Migration

Contract: 6 months

Rate: £750 per day

IR35: Inside IR35

Location: Remote-led / flexible

The Opportunity

A leading organisation is looking for a practical, hands-on migration Security Engineer to support a major network modernisation programme, with a specific focus on the secure access workstream.

The role is centred around Palo Alto Prisma / Strata Cloud Manager, where security policies are managed, and will involve supporting a large-scale brownfield migration from Zscaler. This is a complex enterprise environment covering circa 30,000 users and hundreds of sites, with policies applied across multiple business areas.

This is not a pure delivery or ticket-based role. The successful candidate will be expected to help shape design decisions, build and adapt security policies, challenge where needed, and clearly translate technical detail for non-technical stakeholders.

Key Responsibilities

• Design, build and adapt security policies within Palo Alto Prisma / Strata Cloud Manager
• Support a brownfield migration from Zscaler into the Palo Alto environment
• Work across policy areas including DLP, file control, URL filtering and proxy policies
• Review and adapt existing Zscaler configurations where appropriate
• Help make practical design decisions during the migration
• Translate technical security detail for non-technical stakeholders
• Escalate risks, blockers and technical issues clearly to senior stakeholders
• Prioritise workload effectively and push back when required
• Support a product-style delivery model, working through sprints and defined programme milestones
• Contribute to post-migration BAU, optimisation and continuous improvement

Key Requirements

• Strong hands-on experience with Palo Alto Prisma / Strata Cloud Manager
• Direct experience with Palo Alto / Strata migration activity
• Practical knowledge of security policy design and implementation
• Experience supporting migrations from Zscaler would be highly beneficial
• Strong understanding of secure access, SASE-style environments and policy-based controls
• Experience working in large-scale enterprise environments
• Ability to communicate clearly with senior stakeholders, including Director / C-level audiences
• Comfortable working to fixed deadlines in a commercially pressured programme
• Terraform / Infrastructure as Code experience would be useful, but is not essential
• Firewall and VPN experience is beneficial, but not essential

Ideal Profile

This role is best suited to a hybrid network/security engineer or architect who has delivered hands-on policy work across Palo Alto Prisma / Strata Cloud Manager, ideally as part of a migration from Zscaler.

The client is not looking for a generic network engineer or someone with light training exposure. They need someone who can design, build, adapt and explain security policies in a complex brownfield environment, while helping the team meet a hard programme deadline