Palo Alto Networks Device Security Engineer

Title: Palo Alto Networks Device Security Engineer

Location: New York, NY (Hybrid - minimum 2 days onsite per week)

Duration: 12+ Months contract

Key Responsibilities

• Lead hands-on configuration and operationalization of Palo Alto Networks Device Security through Strata Cloud Manager.
• Plan and implement device discovery, profiling, classification, and inventory enrichment.
• Perform device risk assessments and evaluate policy recommendations and network-segmentation requirements.
• Configure, validate, and troubleshoot integrations with Palo Alto Networks Next-Generation Firewalls, Panorama, Prisma Access, Cortex XDR, Cortex XSOAR, SIEM, ITSM, APIs, and authorized asset-information sources.
• Analyze device and network telemetry to identify discovery gaps, classification errors, inconsistent device records, and integration issues.
• Troubleshoot connector failures, API errors, telemetry problems, and production-readiness defects.
• Support architecture decisions, technical design, integration planning, testing, and production rollout.
• Coordinate implementation activities across cybersecurity, network, infrastructure, operations, vendor teams, and business stakeholders.
• Manage technical schedules, dependencies, risks, issues, change control, and implementation status reporting.
• Develop and maintain architecture diagrams, configuration records, integration procedures, test evidence, operating procedures, and troubleshooting documentation.
• Conduct production validation, support phased deployment and adoption, and coordinate operational handoff.
• Provide demonstrations, mentoring, technical training, and knowledge transfer to internal teams.
• Use scripting, APIs, and data-analysis tools to support integration, validation, reporting, and repeatable engineering tasks.

Required Qualifications

• Demonstrated experience leading or serving as the primary implementation engineer for at least one completed production implementation involving device security, IoT/OT security, or network-based asset discovery.
• Hands-on experience configuring and operating Palo Alto Networks Device Security through Strata Cloud Manager.
• Practical experience with device discovery, profiling, classification, inventory enrichment, risk assessment, policy recommendations, and production validation.
• Strong experience configuring and troubleshooting Palo Alto Networks PAN-OS, Panorama, and Next-Generation Firewalls.
• Understanding of network traffic visibility, device telemetry, policy validation, and network segmentation.
• Experience integrating security platforms with enterprise systems through APIs, connectors, or integration services.
• Experience diagnosing and resolving discovery gaps, classification issues, telemetry problems, connector failures, API errors, and inconsistent device records.
• Experience using technical tools such as Python, PowerShell, Postman, XQL, Git, REST APIs, or comparable technologies for automation, data extraction, validation, and reporting.
• Experience coordinating technical implementations, managing dependencies and risks, tracking issues, and communicating status to stakeholders.
• Ability to produce clear technical documentation, including architecture diagrams, configuration records, test evidence, operating procedures, and troubleshooting guides.
• Strong analytical, troubleshooting, communication, and cross-functional collaboration skills.

Preferred Qualifications

• Experience with Prisma Access, GlobalProtect, Cortex XDR, Cortex XSOAR, and related Palo Alto Networks security technologies.
• Experience with SIEM, ITSM, asset inventory, and enterprise security integrations.
• Knowledge of IoT/OT security, device telemetry, network-based asset discovery, and segmentation strategies.
• Experience with security engineering in large, distributed, multi-site environments.
• Relevant Palo Alto Networks, networking, cybersecurity, IoT/OT, or project-management certifications.
• Experience developing implementation plans, technical status reports, governance documentation, and operational handoff materials.
• Experience delivering technical demonstrations, mentoring engineers, and transferring knowledge to operational teams.