Senior Security Services Consultant

Palo Alto Networks, Inc.; New York (NY); Remote; USD 112,000 - 183,000; Full time

Job summary

Palo Alto Networks, Inc. seeks an experienced Identity Security professional to lead customer implementations, develop project plans, and nurture relationships. This remote role supports nationwide collaboration and requires up to 10% travel.

You will manage IAM across AWS, Azure, and GCP, use IaC tools like Terraform or CloudFormation, and assist with security policy and product enhancements. Strong communication and independence are essential.

Qualifications

• Bachelor's degree in CS or similar field.
• 5+ years in a technical/implementation role deploying enterprise software.
• Experience with IAM solutions (SSO, MFA, SCIM, OAUTH, OIDC).
• Experience with cloud IAM across AWS, Azure and GCP.
• Proficiency with IaC tools (Terraform, CloudFormation).
• Familiarity with cloud governance and compliance (CIS/NIST).
• Experience with monitoring/logging tools (CloudWatch, Azure Monitor, SIEM).
• Experience with Azure/O365, AWS Standalone Accounts, and Google Cloud.
• 2+ years working with CyberArk products.
• Strong written and verbal communication; ability to train technical users.
• Ability to work independently and manage many detail-heavy tasks.

Responsibilities

• Lead implementations and onboarding engagements with customers.
• Assist customers with developing, managing, and executing project plans and timelines.
• Help maintain customer relationships and identify opportunities for growth.
• Collaborate in the ongoing development of training materials and curriculum.
• Collaborate with the team on consulting and development activities.
• Support Identity Security Services team with escalations support duties.
• Coordinate with Idira departments to complete implementation tasks.
• Potential for nationwide travel up to 10%.
• Support Product and Engineering teams on testing and product enhancements.

Skills

IAM

Cloud IAM

REST APIs

Programming: Java/Python/PowerShell

Multi-cloud (AWS/Azure/GCP)

CyberArk

SIEM familiarity

Cloud CLI

OAUTH/OIDC

SSO/MFA/SCIM

Education

Bachelor's Degree in Computer Science or similar field

Tools

Terraform

CloudFormation

CloudWatch

Azure Monitor

SIEM

Workato

Tray.io

Zapier

CyberArk Flows

Cloud CLI

Job description

Our Mission

At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place.

Who We Are

In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us! This role is remote, but distance is no barrier to impact. Our hybrid teams collaborate across geographies to solve big problems, stay close to our customers, and grow together. You will be part of a culture that values trust, accountability, and shared success where your work truly matters.

Job Summary

Your Impact:

• Lead implementations and onboarding engagements with customers
• Assist customers with developing, managing, and executing project plans and timelines
• Help maintain customer relationships and identify opportunities for growth
• Collaborate in the ongoing development of training materials and curriculum
• Collaborate with the team on consulting and development activities
• Support the Identity Security Services team by assisting with technical escalations support duties
• Collaborate with other Idira departments to ensure coordination and completion of all additional implementation-related tasks
• Potential for nationwide travel up to 10% (at employee discretion)
• Support Product and Engineering teams on testing, documenting and collaborating on product enhancements

Qualifications:

Your Experience

• Deep understanding Just-In-Time Zero Standing Privilege principals
• Experience with cloud identity and access management (IAM) across multi-cloud environments (AWS, Azure, GCP)
• Proficiency in Infrastructure as Code (IaC) tools like Terraform or CloudFormation for deploying cloud resources
• Experience with cloud governance and compliance frameworks (e.g., CIS Benchmarks, NIST)
• Familiarity with monitoring and logging tools for cloud environments (e.g., CloudWatch, Azure Monitor, SIEM integrations)
• Proven ability to troubleshoot security policy issues in distributed cloud environments

• Prior 5+ years of experience in a technical / implementation role deploying enterprise software
• Experience with Workflow Automation tools (Workato, Tray.io, Zapier,CyberArk Flows, etc)
• Experience with programming / scripting (java, python, PowerShell), primarily working with REST based API’s
• Experience with Cloud CLI in Azure/GCP/AWS
• Experience in Software Development either designing, building, or working with cloud-native solutions is nice to have
• Experience with Identity and Access Management solutions (SSO, MFA, SCIM, OAUTH, OIDC)
• Security+ or CISSP is nice to have
• Bachelor’s Degree in Computer Science or similar field
• Prior 2+ years of experience working with CyberArk products
• Demonstrable knowledge of Information Security
• Demonstrated ability to assume sole and independent responsibilities
• Ability to keep track of numerous detail-intensive tasks and ensure accurate completion
• Ability to train technical users and conduct technical presentations
• Exceptional written and verbal communications skills
• Experience with various IAM/PAM solutions
• Experience with Azure/O365
• Experience with AWS Standalone Accounts and AWS Identity Center
• Experience with Google Cloud Platform

Qualifications

Compensation Disclosure

The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/com-missioned roles) is expected to be the annual range listed below. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found here.

$112,000.00 - $182,500.00/yr

Our Commitment

We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together.

We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at [e-mail].

Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.

All your information will be kept confidential according to EEO guidelines.

Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.