Palo Alto Networks Device Security Engineer
2 days ago
New York
Title: Palo Alto Networks Device Security Engineer \n Location: New York, NY (Hybrid – minimum 2 days onsite per week) \n Duration: 12+ Months contract \n \n Key Responsibilities \n\n • Lead hands-on configuration and operationalization of Palo Alto Networks Device Security through Strata Cloud Manager.\n, • Plan and implement device discovery, profiling, classification, and inventory enrichment.\n, • Perform device risk assessments and evaluate policy recommendations and network-segmentation requirements.\n, • Configure, validate, and troubleshoot integrations with Palo Alto Networks Next-Generation Firewalls, Panorama, Prisma Access, Cortex XDR, Cortex XSOAR, SIEM, ITSM, APIs, and authorized asset-information sources.\n, • Analyze device and network telemetry to identify discovery gaps, classification errors, inconsistent device records, and integration issues.\n, • Troubleshoot connector failures, API errors, telemetry problems, and production-readiness defects.\n, • Support architecture decisions, technical design, integration planning, testing, and production rollout.\n, • Coordinate implementation activities across cybersecurity, network, infrastructure, operations, vendor teams, and business stakeholders.\n, • Manage technical schedules, dependencies, risks, issues, change control, and implementation status reporting.\n, • Develop and maintain architecture diagrams, configuration records, integration procedures, test evidence, operating procedures, and troubleshooting documentation.\n, • Conduct production validation, support phased deployment and adoption, and coordinate operational handoff.\n, • Provide demonstrations, mentoring, technical training, and knowledge transfer to internal teams.\n, • Use scripting, APIs, and data-analysis tools to support integration, validation, reporting, and repeatable engineering tasks.\n\n \n Required Qualifications \n\n • Demonstrated experience leading or serving as the primary implementation engineer for at least one completed production implementation involving device security, IoT/OT security, or network-based asset discovery.\n, • Hands-on experience configuring and operating Palo Alto Networks Device Security through Strata Cloud Manager.\n, • Practical experience with device discovery, profiling, classification, inventory enrichment, risk assessment, policy recommendations, and production validation.\n, • Strong experience configuring and troubleshooting Palo Alto Networks PAN-OS, Panorama, and Next-Generation Firewalls.\n, • Understanding of network traffic visibility, device telemetry, policy validation, and network segmentation.\n, • Experience integrating security platforms with enterprise systems through APIs, connectors, or integration services.\n, • Experience diagnosing and resolving discovery gaps, classification issues, telemetry problems, connector failures, API errors, and inconsistent device records.\n, • Experience using technical tools such as Python, PowerShell, Postman, XQL, Git, REST APIs, or comparable technologies for automation, data extraction, validation, and reporting.\n, • Experience coordinating technical implementations, managing dependencies and risks, tracking issues, and communicating status to stakeholders.\n, • Ability to produce clear technical documentation, including architecture diagrams, configuration records, test evidence, operating procedures, and troubleshooting guides.\n, • Strong analytical, troubleshooting, communication, and cross-functional collaboration skills.\n\n Preferred Qualifications \n\n • Experience with Prisma Access, GlobalProtect, Cortex XDR, Cortex XSOAR, and related Palo Alto Networks security technologies.\n, • Experience with SIEM, ITSM, asset inventory, and enterprise security integrations.\n, • Knowledge of IoT/OT security, device telemetry, network-based asset discovery, and segmentation strategies.\n, • Experience with security engineering in large, distributed, multi-site environments.\n, • Relevant Palo Alto Networks, networking, cybersecurity, IoT/OT, or project-management certifications.\n, • Experience developing implementation plans, technical status reports, governance documentation, and operational handoff materials.\n, • Experience delivering technical demonstrations, mentoring engineers, and transferring knowledge to operational teams.\n\n