Senior Cybersecurity Engineer — Palo Alto NGFW & Cloud Security

Deloitte France; San Francisco (CA); On-site; USD 105,000 - 208,000; Full time

Job summary

Deloitte seeks a Cyber Enterprise Security Senior Consultant to design, deploy, and optimize Palo Alto Networks NGFWs across on‑premise and cloud environments (AWS, Azure, GCP). You’ll implement Prisma Access and manage Panorama/Strata Cloud Manager, integrating security with SIEM/SOAR and identity tools while applying automation via Terraform, Ansible, or Python.

The role requires 5+ years in network security with Palo Alto tech, a technical BA/BS, and willingness to travel up to 50%.

Qualifications

• BA/BS degree in a technical field (e.g., Computer Science, Cyber Security, Information Technology, or equivalent work experience)
• Palo Alto Networks Certified Network Security Professional (PCNSE) certification or equivalent
• 5+ years of progressively responsible experience in network security engineering with Palo Alto Networks
• 5+ years deploying NGFWs in on-premises and cloud environments (AWS, Azure, GCP)
• 3+ years deploying Prisma Access including GlobalProtect, Prisma Agent, Prisma Browser
• 3+ years deploying Panorama centralized management and Strata Cloud Manager
• 3+ years configuring Threat Prevention features (IPS/IDS, Anti-Spyware, Antivirus, WildFire, DNS Security)
• 3+ years implementing SSL/TLS Decryption policies
• 3+ years defining and reviewing security policies
• 3+ years with one or more cloud providers and deploying VM-Series in cloud-native architectures
• Willingness to travel up to 50%
• Limited immigration sponsorship may be available
• Advanced cybersecurity certifications (e.g., CISSP, CCIE/CCNP Security, GIAC)
• Automation tooling experience (Terraform, Ansible, Python) for provisioning and policy management
• Experience integrating Palo Alto with SIEM/SOAR (e.g., Splunk, Microsoft Sentinel, XSOAR)
• Experience designing Palo Alto network solution architectures for client requirements
• Experience in large complex enterprise environments with security/compliance requirements
• Identity provider integrations (Okta, Azure AD, Ping Identity) for SAML/SCIM authentication
• Ability to perform SASE vendor analyses and Zero Trust Architecture roadmaps
• Previous Big 4 consulting experience in enterprise security or SASE transformations

Responsibilities

• Designing, deploying, and managing Palo Alto NGFWs across on-prem and cloud (AWS, Azure, GCP)
• Implementing and optimizing Prisma Access capabilities (GlobalProtect, Prisma Agent, Prisma Browser)
• Administering Panorama and Strata Cloud Manager for centralized policy management
• Configuring and tuning Threat Prevention, IPS/IDS, DNS Security, SSL/TLS decryption policies
• Developing client designs integrating Palo Alto with SIEM/SOAR and identity tools, with Terraform/Ansible/Python for automation

Skills

Ability to work independently

Team collaboration

Effective written and verbal skills

Attention to detail

Project leadership

Multitasking in fast-paced environment

Strong interpersonal skills

Deadline-driven

Ability to guide others

Education

BA/BS degree in a technical field

Tools

Palo Alto Networks NGFW

GlobalProtect

Prisma Access

Panorama

Strata Cloud Manager

Terraform

Ansible

Python

Job description

Deloitte seeks a Cyber Enterprise Security Senior Consultant to design, deploy, and optimize Palo Alto Networks NGFWs across on‑premise and cloud environments (AWS, Azure, GCP). You’ll implement Prisma Access and manage Panorama/Strata Cloud Manager, integrating security with SIEM/SOAR and identity tools while applying automation via Terraform, Ansible, or Python.

The role requires 5+ years in network security with Palo Alto tech, a technical BA/BS, and willingness to travel up to 50%.