Lead the design, implementation, and management of security controls across three critical domains: Endpoint Security, Identity & Access Management, and AI Security, safeguarding Palo Alto Networks' global infrastructure with a Zero Trust approach.
Key Responsibilities
Design, build and implement enterprise security capabilities to protect Palo Alto Networks global infrastructure
Develop strategies to maintain security architecture, prevent unauthorized access, and ensure identity governance across the enterprise
Establish, maintain, and enforce hardened security baselines for Endpoints, Identity, and AI tools
Lead AI security governance, define controls, policies, and threat models for safe enterprise adoption of AI tools and models
Evaluate and secure AI-related data flows, including prompt injection risks, model access controls, and data exfiltration vectors
Implement and manage Identity Security, Endpoint security, and Access Management capabilities with a Zero Trust approach
Design and enforce endpoint hardening strategies across managed and unmanaged devices, endpoint DLP controls, drive mobile security and BYOD posture management
Be the first customer for Palo Alto Networks products and provide practitioner feedback to the product teams
Perform threat modeling and security architecture reviews for complex enterprise systems, infrastructure, and third-party integrations
Work with Security Operations team to investigate identity and endpoint breach incidents, identify root cause and provide appropriate remediation or risk reduction plans
Collaborate with legal and governance, risk and compliance (GRC) teams to ensure adherence to Identity and data protection regulations
Evaluate ongoing practices and procedures, technical documentation, and diagrams for appropriate security measure maturity and effectiveness
Lead hands-on POCs and technology evaluations with rigorous benchmarks; champion adoption with a collaborative team mindset
Be a strong thought leader and clearly communicate and build support for your ideas.
Requirements: 8+ years of hands-on experience in enterprise security engineering, spanning identity & access management, endpoint security, and/or cloud security, with a Zero Trust mindset
Deep understanding of the AI security domain, trends, and risks, with hands-on experience securing AI models, LLM integrations, and implementing enterprise security controls
Strong experience in designing and securing Enterprise Identity architecture, including Identity Providers (Okta, Ping, Entra ID), Access Governance & IGA (SailPoint, Saviynt), and directory services (Active Directory, RedHat)
In depth knowledge of public cloud architecture, such as GCP, AWS and Azure, with focus on securing Identities in the cloud environments
Hands-on experience with endpoint security platforms like Palo Alto Networks XDR, device management (Microsoft Intune, JAMF), and endpoint DLP
In depth knowledge of threat model, application security assessments, network security, encryption, authentication and authorization
Proficiency in programming / scripting / automation (e.g. Python, Golang, or Powershell) for security engineering workflows
Bachelor's degree or equivalent training and education.
Preferred Qualifications
Experience in security engineering related to identity & access, data security, network security, intrusion prevention, monitoring, analytical and correlation tools a PLUS
Certification in any of the following is a plus: Google Cloud Architect; AWS Cloud Architect, CISSP-ISSEP - Sec. Eng. Professional, GIAC Certified Enterprise Defender (GCED), CCSP.
This position is open to all candidates.