Principal Security Architect - Multi-Cloud & Zero Trust

Palo Alto Networks, Inc.; Santa Clara (CA); On-site; USD 168,000 - 271,000; Full time

Benefits offered by this job

Restricted stock units

Annual bonus

Employee benefits

Job summary

Palo Alto Networks, Inc. is seeking a Principal Security Architect to define the North Star for our cloud-native platforms, ensuring secure-by-design across GCP, AWS, Azure, and OCI.

In a player-coach role, you will drive threat modeling, collaborate with engineering leadership, and embed security deeply within next-generation products.

You will mentor security engineers and partner with cross-functional teams to advance security across the enterprise.

Qualifications

• 8+ years in security engineering/architecture with 4+ years in staff roles.
• Hands-on expertise across at least one major cloud provider with knowledge of others.
• Deep Secure-by-Design, Privacy-by-Design, and Zero Trust practice.
• Proven experience with threat modeling for microservices/serverless.

Responsibilities

• Define security architecture patterns for multi-cloud services (GCP, AWS, Azure, OCI, SAP).
• Lead secure, scalable system design with IAM and data protection.
• Drive Zero Trust strategy across development and production SaaS.
• Own threat modeling methodology and run deep-dive sessions.
• Translate risks into the Cybersecurity Risk Register and brief leadership.
• Advise teams on CWPP, CSPM, NGFW and security solutions.
• Mentor Staff/Senior security engineers to raise engineering excellence.
• Lead Tiger Teams bridging Dev, Product Eng, and InfoSec.

Skills

Security architecture

Cloud platforms (GCP/AWS/AZ/OCI/SAP)

Threat modeling

Scripting (Python/Go)

CI/CD security

Staff-level leadership

Tools

CWPP

CSPM

Container security

Job description

Palo Alto Networks, Inc. is seeking a Principal Security Architect to define the North Star for our cloud-native platforms, ensuring secure-by-design across GCP, AWS, Azure, and OCI.

In a player-coach role, you will drive threat modeling, collaborate with engineering leadership, and embed security deeply within next-generation products.

You will mentor security engineers and partner with cross-functional teams to advance security across the enterprise.