Lead Palo Alto Networks Device Security Engineer

The Lead Palo Alto Networks Device Security Engineer will own end-to-end delivery of Palo Alto Networks Device Security across CUNY's distributed environment, strengthening device discovery, inventory, visibility, risk assessment, policy development, integration, and operational resilience.

What You Will Do

Key responsibilities include leading hands-on configuration and operationalization of Palo Alto Networks Device Security, coordinating device discovery and classification, configuring and validating integrations with various systems, analyzing device and network telemetry, and troubleshooting discovery and integration issues.

Why It Might Be a Fit

The ideal candidate will have experience with implementation engineering, device security engineering, and integration with enterprise systems, as well as strong technical skills and the ability to work with central teams and stakeholders across 25 colleges.

Requirements

• At least one completed production device-security, IoT/OT-security or network-based asset-discovery implementation as technical lead or primary implementation engineer
• Hands-on configuration and operation of Palo Alto Networks Device Security through Strata Cloud Manager
• Configuration and troubleshooting of PAN-OS, Panorama and NGFWs
• Integration with enterprise systems such as Cortex XDR, Cortex XSOAR, Prisma Access, SIEM, ITSM, APIs, connectors or asset-information sources
• Diagnosis and resolution of discovery gaps, classification errors, telemetry issues, connector failures, API errors, duplicate/inconsistent device records and production-readiness defects
• Use of APIs, PowerShell, Python, Postman, XQL, Git or similar for data extraction, integration, validation, reporting or repeatable engineering tasks
• Ownership of integrated schedules, dependencies, risks, issues, change control, stakeholder coordination, status reporting and decision tracking
• Architecture diagrams, configuration records, integration procedures, test evidence, operating procedures, troubleshooting guides and KT materials produced by the candidate

Benefits

• Best all-inclusive hourly rate