Lead Palo Alto Networks Device Security Engineer

Job Description

Job Description

Now Hiring: Lead Palo Alto Networks Device Security Engineer

Location: New York, NY (Hybrid – 2 Days Onsite / 3 Days Remote)
Employment Type: Contract – 12 Months
Anticipated Start Date: November 2026
Schedule: Monday–Friday, 8:00 AM–5:00 PM EST (40 Hours/Week)

About the Opportunity

We are seeking an experienced Lead Palo Alto Networks Device Security Engineer – Specialist II to lead the implementation and operationalization of Palo Alto Networks Device Security within a large, distributed enterprise environment.

This is an exciting opportunity for a hands-on cybersecurity professional to play a key role in strengthening device visibility, asset discovery, risk assessment, security policy development, and network security operations.

The ideal candidate will bring strong technical expertise in Palo Alto Networks Device Security, Strata Cloud Manager, PAN-OS, Panorama, and Next-Generation Firewalls , along with proven experience implementing enterprise-scale device security, IoT/OT security, or network-based asset discovery solutions.

Key Responsibilities

• Lead the end-to-end implementation, configuration, and operationalization of Palo Alto Networks Device Security through Strata Cloud Manager.

• Manage device discovery, profiling, classification, inventory enrichment, and risk assessment activities.

• Develop security policy recommendations and support network segmentation requirements.

• Configure and validate integrations with Palo Alto Networks Next-Generation Firewalls, Panorama, Prisma Access, Cortex XDR, Cortex XSOAR, SIEM, ITSM, and other enterprise systems.

• Analyze device and network telemetry to identify security risks, visibility gaps, and potential vulnerabilities.

• Troubleshoot device discovery issues, classification errors, connector failures, API errors, and data inconsistencies.

• Coordinate implementation activities with cybersecurity, networking, infrastructure, operations, vendor teams, and business stakeholders.

• Lead technical planning, implementation schedules, dependency management, risk tracking, and change control.

• Conduct testing, troubleshooting, production validation, and operational readiness assessments.

• Develop architecture diagrams, configuration documentation, integration procedures, troubleshooting guides, and operational runbooks.

• Provide technical training, knowledge transfer, and support for phased deployments and ongoing solution adoption.

Required Qualifications

• Proven experience serving as a technical lead or primary implementation engineer on at least one completed production device security, IoT/OT security, or network-based asset discovery implementation.

• Hands-on experience configuring and operating Palo Alto Networks Device Security through Strata Cloud Manager .

• Strong knowledge of device discovery, profiling, classification, inventory management, risk assessment, and security policy recommendations.

• Experience configuring and troubleshooting PAN-OS, Panorama, and Palo Alto Networks Next-Generation Firewalls .

• Understanding of network traffic visibility, device telemetry, security policy validation, and network segmentation.

• Experience integrating device security platforms with enterprise security and operational systems, such as Cortex XDR, Cortex XSOAR, Prisma Access, SIEM, ITSM, APIs, and integration connectors, as applicable to the project.

• Demonstrated ability to troubleshoot device discovery gaps, classification errors, telemetry issues, connector failures, and API integration problems.

• Experience with PowerShell, Python, REST APIs, Postman, XQL, Git , or comparable tools for automation, reporting, integration, and data validation.

• Experience coordinating technical implementation schedules, project dependencies, risks, issues, change control, and stakeholder communications.

• Strong technical documentation, troubleshooting, analytical, and communication skills.

• Ability to lead technical initiatives while collaborating with cross-functional teams.

Technical Environment

Candidates should have experience with several of the following technologies:

• Device Security: Palo Alto Networks Device Security, Strata Cloud Manager, Device Security Inventory, Query Builder

• Network Security: Palo Alto Networks Next-Generation Firewalls, PAN-OS, Panorama, Prisma Access, GlobalProtect

• Security Operations: Cortex XDR, Cortex XSOAR, XQL

• Security Integration: SIEM, ITSM, Device Security APIs, integration connectors

• Automation & Scripting: PowerShell, Python, REST APIs, Postman, Git

• Network Diagnostics: Wireshark, network segmentation and traffic analysis tools

• Project & Collaboration Tools: ServiceNow, Microsoft Project, Microsoft Visio, Microsoft Teams, SharePoint

Additional Qualifications

• Current Palo Alto Networks, cybersecurity, networking, IoT/OT, or project management certifications are a plus but are not generally required.

• Experience supporting large-scale, distributed enterprise environments.

• Strong understanding of enterprise security architecture, device visibility, and risk management.

• Experience developing technical documentation, operational procedures, and knowledge-transfer materials.

• Ability to communicate technical information effectively to leadership, stakeholders, and engineering teams.

• Strong organizational skills and the ability to manage multiple technical priorities.

Work Arrangement

• Hybrid: Minimum of 2 days onsite per week in New York, NY, with remaining days remote.

• Contract Duration: 12 months.

• Schedule: 40 hours per week, Monday through Friday.

• Occasional travel to additional project locations may be required.

• Background screening and security access approvals may be required.

If you're an experienced Palo Alto Networks Device Security Engineer with a strong background in enterprise security implementations, IoT/OT security, and network-based asset discovery, we'd love to hear from you!

Apply today to learn more about this opportunity!

#ZR