Palo Alto Networks Device Security Engineer

Job Description

Title: Palo Alto Networks Device Security Engineer

Location: New York, NY (Hybrid – minimum 2 days onsite per week)

Duration: 12+ Months contract

Key Responsibilities

\n
• Lead hands-on configuration and operationalization of Palo Alto Networks Device Security through Strata Cloud Manager.
\n
• Plan and implement device discovery, profiling, classification, and inventory enrichment.
\n
• Perform device risk assessments and evaluate policy recommendations and network-segmentation requirements.
\n
• Configure, validate, and troubleshoot integrations with Palo Alto Networks Next-Generation Firewalls, Panorama, Prisma Access, Cortex XDR, Cortex XSOAR, SIEM, ITSM, APIs, and authorized asset-information sources.
\n
• Analyze device and network telemetry to identify discovery gaps, classification errors, inconsistent device records, and integration issues.
\n
• Troubleshoot connector failures, API errors, telemetry problems, and production-readiness defects.
\n
• Support architecture decisions, technical design, integration planning, testing, and production rollout.
\n
• Coordinate implementation activities across cybersecurity, network, infrastructure, operations, vendor teams, and business stakeholders.
\n
• Manage technical schedules, dependencies, risks, issues, change control, and implementation status reporting.
\n
• Develop and maintain architecture diagrams, configuration records, integration procedures, test evidence, operating procedures, and troubleshooting documentation.
\n
• Conduct production validation, support phased deployment and adoption, and coordinate operational handoff.
\n
• Provide demonstrations, mentoring, technical training, and knowledge transfer to internal teams.
\n
• Use scripting, APIs, and data-analysis tools to support integration, validation, reporting, and repeatable engineering tasks.
\n

Required Qualifications

\n
• Demonstrated experience leading or serving as the primary implementation engineer for at least one completed production implementation involving device security, IoT/OT security, or network-based asset discovery.
\n
• Hands-on experience configuring and operating Palo Alto Networks Device Security through Strata Cloud Manager .
\n
• Practical experience with device discovery, profiling, classification, inventory enrichment, risk assessment, policy recommendations, and production validation.
\n
• Strong experience configuring and troubleshooting Palo Alto Networks PAN-OS, Panorama, and Next-Generation Firewalls .
\n
• Understanding of network traffic visibility, device telemetry, policy validation, and network segmentation.
\n
• Experience integrating security platforms with enterprise systems through APIs, connectors, or integration services.
\n
• Experience diagnosing and resolving discovery gaps, classification issues, telemetry problems, connector failures, API errors, and inconsistent device records.
\n
• Experience using technical tools such as Python, PowerShell, Postman, XQL, Git, REST APIs, or comparable technologies for automation, data extraction, validation, and reporting.
\n
• Experience coordinating technical implementations, managing dependencies and risks, tracking issues, and communicating status to stakeholders.
\n
• Ability to produce clear technical documentation, including architecture diagrams, configuration records, test evidence, operating procedures, and troubleshooting guides.
\n
• Strong analytical, troubleshooting, communication, and cross-functional collaboration skills.
\n

Preferred Qualifications

\n
• Experience with Prisma Access, GlobalProtect, Cortex XDR, Cortex XSOAR, and related Palo Alto Networks security technologies.
\n
• Experience with SIEM, ITSM, asset inventory, and enterprise security integrations.
\n
• Knowledge of IoT/OT security, device telemetry, network-based asset discovery, and segmentation strategies.
\n
• Experience with security engineering in large, distributed, multi-site environments.
\n
• Relevant Palo Alto Networks, networking, cybersecurity, IoT/OT, or project-management certifications.
\n
• Experience developing implementation plans, technical status reports, governance documentation, and operational handoff materials.
\n
• Experience delivering technical demonstrations, mentoring engineers, and transferring knowledge to operational teams.
\n