About the role

Role overview

Join Palo Alto Networks as a Principal Security Architect (Information Security) to define and drive the organization’s multi-cloud security strategy. You’ll lead complex security architecture efforts, embed security into next-generation products, and act as a subject-matter expert across cloud security, threat modeling, and secure-by-design principles.

Responsibilities

Define and drive the organization’s cloud security strategy, ensuring native cloud platforms are secure by design.
Lead design of secure, scalable, resilient systems, promoting:
- Identity management and isolation
Execute complex threat modeling for microservices and serverless architectures.
Provide security product expertise and advise product teams on architecture that resists modern threats.
Mentor and provide technical guidance to security engineers.
Lead cross-functional efforts to deliver complex security implementations.
Communicate technical risk to executive audiences and negotiate architectural trade-offs.

Requirements

Deep, hands-on architectural expertise in at least one major public cloud provider (GCP, AWS, Azure, OCI, or SAP) with working knowledge of the others.
Scripting proficiency in Python or Go, plus experience securing CI/CD pipelines.
Proven track record executing threat models (e.g., STRIDE, PASTA, DREAD) for microservices/serverless.
Advanced, hands-on knowledge of Secure-by-Design, Privacy-by-Design, and Zero Trust.
8+ years security engineering and/or security architecture, including 4+ years in a Principal/Lead capacity.
Deep experience securing AI/ML ecosystems, including adversarial ML attacks and defenses for LLMs.
Experience in the security vendor landscape, including designing/using CSPM, CWPP, and container security platforms.
Experience with well-architected frameworks and security pillars (AWS, Azure, GCP).

Nice to have

Familiarity with SAP cloud security patterns (explicitly listed among acceptable cloud providers).

About Palo Alto Networks

Palo Alto Networks is a cybersecurity company focused on protecting organizations across networks, cloud environments, and endpoints. It delivers security platforms and products that help prevent, detect, and respond to modern threats, including multi-cloud security strategy and security-by-design approaches.