Palo Alto Cloud Security Engineer

NTT DATA North America•Austin, TX

2d•Remote

About The Position

The Palo Alto Cloud Security Engineer will support the our long term Public Cloud Manager client contract by designing, deploying, and maintaining secure cloud environments utilizing Palo Alto Networks technologies. This role provides advanced engineering, operational support, and security governance across Prisma Cloud, Cortex, and Panorama-managed firewalls to ensure compliance with client security policies, regulatory frameworks, and cloud best practices. The ideal candidate has deep hands-on experience in cloud security architecture, Palo Alto product suites, and public cloud environments (AWS, Azure, GCP), and can work collaboratively with state agencies, vendors, and internal teams.

Requirements

Expert-level experience with Palo Alto Prisma Cloud
CSPM, CWPP, CIEM, container & serverless security
Policy management and remediation workflows
Hands-on experience with Palo Alto Cortex
Cortex XDR, XSOAR automation, incident response
SOC integration and threat hunting
Advanced proficiency with Palo Alto Panorama
Centralized firewall management
Policy creation, NAT, security profiles, logging & reporting
Strong understanding of AWS, Azure, and/or GCP cloud architectures.
Expertise in network security: firewalls, IPS/IDS, VPNs, segmentation.
Familiarity with Terraform, CloudFormation, or other IaC tools (preferred).
Experience with SIEM platforms (Splunk, Sentinel, etc.) and log analytics.
Working knowledge of:
NIST 800-53 / NIST CSF
CIS Controls / Benchmarks
State RAMP security standards (DIR, TAC 202)
Experience performing security assessments and cloud compliance reviews.
Strong communication and documentation skills.
Ability to manage competing priorities in a multi-agency environment.
Problem-solving and analytical-thinking skills.
Experience working in regulated government or public-sector environments.
Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent experience.
5+ years of hands-on cloud security or network security engineering experience.
3+ years working specifically with Palo Alto Networks platforms.
Must pass FBI CJIS background requirements

Nice To Haves

Palo Alto certifications: PCNSA, PCNSE, PCCET, Prisma Cloud Certified Engineer
Cloud certifications: AWS Solutions Architect, Azure Security Engineer, Google Professional Cloud Security Engineer
Experience supporting State government cloud programs.
Previous involvement in managed services or cloud operations contracts.

Responsibilities

Deploy, configure, and manage Palo Alto Prisma Cloud for cloud workload protection, CSPM, CIEM, container security, and serverless security.
Integrate and optimize Palo Alto Cortex XDR/XSOAR for threat detection, response automation, and incident investigation.
Manage and maintain firewall policies, device groups, and templates using Palo Alto Panorama.
Support hybrid and multi-cloud security architectures for customers.
Conduct configuration reviews, health checks, and periodic audits of cloud security controls.
Ensure alignment with client security requirements, NIST, FedRAMP, CIS Benchmarks, and state-specific regulatory controls.
Implement continuous compliance monitoring using Prisma Cloud and cloud-native tools.
Develop documentation, security policies, runbooks, and architecture diagrams.
Use Cortex to analyze alerts, triage incidents, and provide forensic investigation support.
Recommend and implement automation playbooks to improve SOC efficiency.
Work with state cybersecurity teams to provide root-cause analysis and threat mitigation strategies.
Serve as a technical advisor to state government agencies participating in the Public Cloud Manager service.
Provide guidance on cloud security best practices, onboarding, and integration of Palo Alto solutions.
Collaborate with cross-functional DIR teams, vendors, cloud providers, and compliance personnel.