SASE & ZTNA Consulting
SASE and ZTNA Consulting for Secure Remote Access at Scale
Digvijay Parmar is a SASE and ZTNA consultant who designed and deployed Palo Alto Prisma ZTNA at J.P. Morgan to enforce least-privilege access and replace traditional VPN risk, and configured Cisco SASE (CASB, ZTNA, FWaaS) for Fortune 100 environments — with AI-driven analytics that cut MTTD by 30%.
What SASE and ZTNA consulting should deliver
SASE converges network security — SWG, CASB, FWaaS, and ZTNA — into a single cloud-delivered platform for secure remote access. ZTNA replaces traditional VPN risk with least-privilege, identity-aware access. Consulting should deliver the architecture, the deployment, and the analytics layer that makes the platform actively reduce risk rather than just pass traffic.
At J.P. Morgan I designed and deployed Palo Alto Prisma ZTNA to enforce least-privilege access and replace traditional VPN risk for a global financial institution, and led the design and execution of a Palo Alto SASE proof-of-concept under strict regulatory and compliance standards.
The AI analytics layer that most SASE rollouts skip
Deploying SASE is table stakes. The differentiator is engineering AI-driven analytics within the SASE architecture for proactive detection. At J.P. Morgan that produced a 30% reduction in mean time to detect and a 50% increase in proactive risk mitigation.
I built Python and REST API solutions for security automation and real-time log analysis alongside the SASE deployment. The point is to turn the SASE platform's telemetry into action — not just collect it.
Multi-vendor SASE experience
At Cisco Systems I configured Cisco SASE — CASB, ZTNA, and FWaaS — for comprehensive, seamless protection in Fortune 100 environments, and implemented ZTNA and microsegmentation with Cisco security solutions to prevent unauthorized lateral movement.
I am PCNSE-certified on Palo Alto and have deep experience with Prisma Access, Cisco SASE, and Fortinet. The multi-vendor perspective matters because SASE decisions are often vendor-mixed in large enterprises.
Book a free working session
Bring one real SASE or ZTNA problem — a Prisma Access rollout you are scoping, a VPN-to-ZTNA migration, or a SASE analytics gap. You leave with a diagnosis and a written summary in 24 hours.
What collaborators say
"Digvijay is very talented in Network Security and he comes up with different ideas to solve the problems, tracing an unknown network, understanding the situation and solving them. He introduces us to new ways to solve the issues and also makes our team aware of it."
— Vibhor Katiyar, Technical Operations Manager, Amazon Web Services
"While working with Digvijay on the same network engineering team but different projects, he was very responsive and with detailed accurate information every time. No matter if it was requesting where to locate documentation, identify a specific config on a device or explain how an appliance is working the way it is, you could always depend on Digvijay to get things done in a timely detailed manner."
— Matthew Calhoun, Manager of US Security Operations, Northern Trust
Stack & tooling
Related work
Frequently asked questions
- What is SASE consulting?
- SASE consulting designs and deploys converged cloud-delivered network security — SWG, CASB, FWaaS, and ZTNA — for secure remote access. Digvijay Parmar has delivered Palo Alto Prisma SASE at J.P. Morgan and Cisco SASE in Fortune 100 environments.
- How is ZTNA different from VPN?
- VPN grants broad network access once authenticated. ZTNA grants least-privilege, identity-aware access to specific applications on a per-session basis, continuously verifying the user and device. Digvijay deployed Prisma ZTNA at J.P. Morgan specifically to replace traditional VPN risk.
- Which SASE platforms does Digvijay support?
- Palo Alto Prisma Access and ZTNA (PCNSE-certified), Cisco SASE (CASB, ZTNA, FWaaS), and Fortinet. He has led Palo Alto SASE proof-of-concepts under strict regulatory and compliance standards.
- Can SASE consulting include AI analytics?
- Yes — and it should. At J.P. Morgan, Digvijay engineered AI-driven analytics within the SASE architecture, achieving a 30% reduction in MTTD and a 50% increase in proactive risk mitigation, with Python and REST API solutions for real-time log analysis.
- Is SASE the same as Zero Trust?
- No. Zero Trust is the architectural principle (least privilege, continuous verification, identity-aware segmentation). SASE is the cloud-delivered platform that delivers Zero Trust for remote and branch access. Digvijay covers both; see the Zero Trust consulting page for the architectural side.
Bring one real problem. Leave with a direction.
The Agentic AI Standup is a free 40-minute working session. You bring one real sase & ztna consulting problem; you leave with a diagnosis, two or three concrete recommendations, and a written summary in your inbox within 24 hours. Three slots open each week.
Book your free session See how it works