Lead Palo Alto Networks Device Security Engineer

Inizio Partners Corp • New York, NY

19h • Hybrid

About The Position

CUNY’s Computing and Information Services is implementing and operationalizing Palo Alto Networks Device Security across its distributed environment to strengthen device discovery, inventory, visibility, risk assessment, policy development, integration, and operational resilience. The engineer will own end-to-end delivery, including planning, dependencies, risks, governance, stakeholder coordination, architecture support, platform configuration, device discovery and classification, inventory enrichment, integrations, policy recommendations, testing, troubleshooting, production validation, operational transition, and adoption. The work involves central teams and stakeholders across 25 colleges.

This is a 12-month engagement based at 395 Hudson Street, 6th Floor, New York, NY, with a hybrid arrangement requiring at least two onsite days per week and the remainder remote. The stated schedule is 8:00 AM–5:00 PM EST, 40 hours per week. The anticipated start is around November 5, 2026.

Requirements

• At least one completed production device-security, IoT/OT-security, or network-based asset-discovery implementation as technical lead or primary implementation engineer; experience must identify platform, scope, responsibilities, outcome, and a client or employer reference.
• Hands-on configuration and operation of Palo Alto Networks Device Security through Strata Cloud Manager, covering device discovery, profiling, classification, inventory enrichment, risk assessment, policy recommendations, and production validation.
• Configuration and troubleshooting of PAN-OS, Panorama, and NGFWs, including traffic visibility, device telemetry, policy validation, and segmentation support.
• Experience integrating enterprise systems such as Cortex XDR, Cortex XSOAR, Prisma Access, SIEM, ITSM, APIs, connectors, or asset-information sources.
• Experience diagnosing and resolving discovery gaps, classification errors, telemetry issues, connector failures, API errors, duplicate or inconsistent device records, and production-readiness defects.
• Use of APIs, PowerShell, Python, Postman, XQL, Git, or similar tools for data extraction, integration, validation, reporting, or repeatable engineering tasks.
• Ownership of technical program delivery, including integrated schedules, dependencies, risks, issues, change control, stakeholder coordination, status reporting, and decision tracking.
• Experience producing architecture diagrams, configuration records, integration procedures, test evidence, operating procedures, troubleshooting guides, and knowledge-transfer materials.
• Ability to work onsite at 395 Hudson Street in New York City at least two days per week.
• Willingness to undergo background screening as directed by CUNY.

Nice To Haves

• Current Palo Alto Networks, networking, IoT/OT, security, or project-management certifications; copies are required if claimed.

Responsibilities

• Lead hands-on configuration and operationalization of Palo Alto Networks Device Security through Strata Cloud Manager.
• Coordinate device discovery, classification, inventory enrichment, risk assessment, policy recommendations, segmentation requirements, and validation.
• Configure and validate integrations with NGFWs, Panorama, Prisma Access, Cortex XDR, Cortex XSOAR, SIEM, ITSM, and other authorized systems.
• Analyze device and network telemetry; troubleshoot device discovery and integration issues; manage resolution and escalation.
• Coordinate with cybersecurity, network, infrastructure, operations, and vendor teams across 25 colleges.
• Prepare architecture, configuration, integration, test, operating-procedure, status, governance, and handoff documentation.
• Provide knowledge transfer and support phased rollout, production validation, adoption, and transition to operations.
• Own integrated schedules, dependencies, risks, issues, change control, stakeholder coordination, status reporting, and decision tracking.
• Diagnose and resolve discovery gaps, classification errors, telemetry issues, connector failures, API errors, duplicate or inconsistent device records, and production-readiness defects.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed