Palo Alto Sr Staff Enterprise Security Engineer InfoSec 

United States, California 

374323366

Being the cybersecurity partner of choice, protecting our digital way of life.

Your Impact

• Design, build and implement security capabilities and services to protect Palo Alto Networks enterprise landscape

• Develop strategies to maintain Identity security architecture, prevent unauthorized access, and ensure identity governance across the enterprise

• Implement and manage Identity Security and Access Management tools

• Work with Security Operations team to investigate identity breach incidents, identify root cause and provide appropriate remediation or risk reduction plans

• Be the first customer for Palo Alto Networks’ Identity products and provide practitioner feedback to the product teams

• Collaborate with legal and governance, risk and compliance (GRC) teams to ensure adherence to Identity protection regulations

• Evaluate ongoing practices and procedures, technical documentation, and diagrams for appropriate security measure maturity and effectiveness

• Be hands on and lead POC with rigorous benchmarks on security technology innovations and adoptions while maintaining a team collaboration mindset

• Be a strong thought leader and clearly communicate and build support for your ideas

Your Experience

• 8+ years of combined experience as a Identity security engineer, cloud security engineer or Enterprise Security engineer

• Extensive experience in information security, security engineering, identity & access management roles with a Zero Trust mindset

• Deep understanding of Identity security in enterprise environments

• Strong experience in designing, implementing and managing Identity security solutions - e.g. Identity providers (Okta, Ping Federate), Access governance (Sailpoint, Saviynt), directory services (Active Directory, RedHat)

• In depth knowledge of public cloud architecture, such as GCP, AWS and Azure, with focus on securing Identities in the cloud environments

• In depth knowledge of threat model, application security assessments, network security, encryption, authentication and authorization

• Expert level experience performing threat modeling and design reviews to assess security implications and requirements

• Experience with programming / scripting in any language (Python / Golang / Powershell etc.)

• Experience in security engineering related to identity & access, data security, network security, intrusion prevention, monitoring, analytical and correlation tools a PLUS

• Certification in any of the following is a plus: OSCP, OSCE, PCNSE, Google Cloud Architect; AWS Cloud Architect, CISSP-ISSEP - Sec. Eng. Professional, GIAC Certified Enterprise Defender (GCED), CCSP

• Bachelor's degree from four-year college or university; or equivalent training, education, and experience in information / cyber security, computer systems, IT, etc.

Compensation Disclosure

The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/commissioned roles) is expected to be between $0 - $0/YR. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found .

All your information will be kept confidential according to EEO guidelines.