SASE Implementation Engineer

REQUIREMENT SUMMARY

Role

SASE Implementation Engineer – Specialist Level III

End Client

CUNY – Computing and Information Services

Location

395 Hudson Street, 6th Floor, New York, NY 10014 (Hybrid: minimum 2 days onsite per week, rest remote)

Positions

1

Duration

12 months

Anticipated Start

Around November 4, 2026

Hours

8 AM – 5 PM EST, 40 hours/week

PROJECT OVERVIEW

CUNY is deploying Palo Alto Networks Prisma Access to strengthen secure remote connectivity and modernize its network security architecture.

The engineer will lead end-to-end technical delivery

architecture support, configuration, integration, migration, testing, troubleshooting, production validation, operational transition and adoption. The role involves coordinating with central IT, vendors and stakeholders across 25 colleges.

KEY RESPONSIBILITIES

• - Lead Prisma Access architecture, configuration, integration, migration, testing and production readiness
• - Coordinate implementation across infrastructure, network, security and vendor teams
• - Analyze and troubleshoot technical issues; manage resolution and escalation
• - Prepare architecture/configuration documentation, procedures, status reports and executive updates
• - Drive transition to operations, knowledge transfer and training for CUNY staff

TECHNICAL ENVIRONMENT

Prisma Access, Strata Cloud Manager, Panorama, PAN-OS (GUI and CLI), GlobalProtect, Prisma Access ADEM, routing/VPN diagnostic tools, Wireshark, Splunk or Microsoft Sentinel, ServiceNow, MS Project, Visio, PowerShell, Python, Ansible, Terraform, Git, Teams, SharePoint.

MANDATORY QUALIFICATIONS (Pass/Fail – the resume must clearly show each of these)

Production implementation

At least one completed production SASE or enterprise network-security implementation as technical lead or primary implementation engineer, with platform, scope, responsibilities, outcome and a client/employer reference.

Prisma Access

Hands-on deployment, configuration, administration and troubleshooting through Strata Cloud Manager, covering mobile users, remote networks, service connections and production validation.

Network security

PAN-OS, Panorama, GlobalProtect, routing, VPN, authentication, security policy, logging, monitoring and HA/resilient network design.

Deployment lifecycle

Architecture validation, migration planning, integration, testing, defect resolution, production readiness, cutover and operational handoff.

Automation

Use of APIs, PowerShell, Python, Ansible, Terraform, Git or similar to automate configuration, validation, reporting or deployment.

Technical program delivery

Ownership of integrated schedules, dependencies, risks, issues, change control, stakeholder coordination and status reporting.

Documentation and knowledge transfer

Architecture diagrams, configuration standards, migration procedures, test evidence, runbooks and KT materials produced by the candidate.

Certifications (scored, not pass/fail)

Current Palo Alto Networks (e.g., PCNSE), networking, security or PM certifications are a strong plus; copies required if claimed.

WHAT TO SUBMIT

• Updated resume (tailored to the mandatory qualifications above)
• Short project narrative for the primary Prisma Access/SASE implementation
• Copies of certifications claimed
• Two professional references (at least one client/employer from the cited implementation)
• Candidate full name, current location, work authorization, availability/notice period
• Confirmation the candidate can work onsite at 395 Hudson St, NYC at least 2 days a week
• Best all-inclusive hourly rate
• Candidate must be willing to undergo background screening as directed by CUNY