Network Security Engineer L2- SASE

L2 Security Engineer - Prisma SASE & Cisco Duo

Experience

• 5-8 years of experience in Network Security, SASE, and Secure Remote Access domains.
• Experience participating in SASE assessments, security transformation initiatives, and migration projects.
• Hands-on experience supporting Palo Alto Prisma Access and Cisco Duo environments.
• Proven experience in incident management, troubleshooting, policy administration, and operational support for enterprise security platforms.

• Role Summary

  The L2 Security Engineer will be responsible for providing operational support for Palo Alto Prisma SASE and Cisco Duo environments while assisting senior security architects with SASE assessments, requirements gathering, solution documentation, and high-level design activities. The role requires a strong understanding of SASE, Zero Trust, identity-based security, and enterprise networking concepts.

  Key Responsibilities

  SASE Assessment & Design Support

• Support senior security architects in conducting current-state assessments and SASE readiness evaluations.
• Gather and document business, technical, and security requirements.
• Assist in analyzing existing remote access, security, and network architectures.
• Contribute to gap assessments, migration planning, and transformation roadmaps.
• Assist in developing High-Level Designs (HLDs), architecture diagrams, and solution documentation.
• Support vendor evaluations, proof-of-concept activities, and technology assessments.

  Operations & Support

• Provide L2 support for Palo Alto Prisma Access and Cisco Duo platforms.
• Troubleshoot and resolve incidents related to ZTNA, VPN, MFA, SSO, remote access, and security policy enforcement.
• Perform user onboarding, access management, policy updates, and standard operational changes.
• Monitor platform health, investigate s, and coordinate issue resolution with vendors and internal teams.
• Support incident, problem, and change management processes in accordance with ITIL practices.

  Security & Identity Integration

• Support integration of Prisma SASE and Cisco Duo with Microsoft Entra ID, Okta, and other identity providers.
• Assist with implementation and support of MFA, SSO, conditional access, and Zero Trust security controls.
• Help validate security policies, user access models, and compliance requirements.
• Support secure connectivity for cloud-hosted and SaaS applications.

  Technical Collaboration

• Work closely with security architects, network teams, and operations teams during assessments and implementation activities.
• Participate in design reviews, technical workshops, and solution validation sessions.
• Assist in preparing technical documentation, implementation plans, and operational runbooks.
• Support knowledge transfer and operational readiness activities.

  Required Skills

• Hands-on experience with Palo Alto Prisma Access (Prisma SASE).
• Experience supporting Cisco Duo MFA and Zero Trust Access solutions.
• Strong understanding of SASE concepts including ZTNA, SWG, CASB, FWaaS, and SSE.
• Knowledge of identity and access management technologies including Microsoft Entra ID and Okta.

  Preferred Certifications

• Palo Alto Prisma Access Certifications.
• Palo Alto PCNSA or PCNSE.
• Cisco Duo Administrator Certification.
• Cisco Security Certifications (CCNP Security preferred).
• Microsoft Entra ID / Identity Certifications.

Skills

network security,SASE, Palo alto prisma,Cisco Duo