Palo Alto Cloud Security Engineer

NTT DATA•Austin, TX

About The Position

Cloud Security Engineering & Operations Deploy, configure, and manage Palo Alto Prisma Cloud for cloud workload protection, CSPM, CIEM, container security, and serverless security. Integrate and optimize Palo Alto Cortex XDR/XSOAR for threat detection, response automation, and incident investigation. Manage and maintain firewall policies, device groups, and templates using Palo Alto Panorama. Support hybrid and multi-cloud security architectures for customers. Conduct configuration reviews, health checks, and periodic audits of cloud security controls. Ensure alignment with client security requirements, NIST, FedRAMP, CIS Benchmarks, and state-specific regulatory controls. Implement continuous compliance monitoring using Prisma Cloud and cloud-native tools. Develop documentation, security policies, runbooks, and architecture diagrams. Work with state cybersecurity teams to provide root-cause analysis and threat mitigation strategies. Provide guidance on cloud security best practices, onboarding, and integration of Palo Alto solutions. Collaborate with cross-functional DIR teams, vendors, cloud providers, and compliance personnel. Working knowledge of: NIST 800-53 / NIST CSF CIS Controls / Benchmarks State RAMP security standards (DIR, TAC 202) Experience performing security assessments and cloud compliance reviews. Expert-level experience with Palo Alto Prisma Cloud CSPM, CWPP, CIEM, container & serverless security Policy management and remediation workflows Hands-on experience with Palo Alto Cortex Cortex XDR, XSOAR automation, incident response SOC integration and threat hunting Advanced proficiency with Palo Alto Panorama Centralized firewall management Policy creation, NAT, security profiles, logging & reporting Strong understanding of AWS, Azure, and/or GCP cloud architectures. Expertise in network security: firewalls, IPS/IDS, VPNs, segmentation. Familiarity with Terraform, CloudFormation, or other IaC tools (preferred). Experience with SIEM platforms (Splunk, Sentinel, etc.) and log analytics. Strong communication and documentation skills. Ability to manage competing priorities in a multi-agency environment. Problem-solving and analytical-thinking skills. Experience working in regulated government or public-sector environments. Palo Alto certifications: PCNSA, PCNSE, PCCET, Prisma Cloud Certified Engineer Cloud certifications: AWS Solutions Architect, Azure Security Engineer, Google Professional Cloud Security Engineer Experience supporting State government cloud programs. Previous involvement in managed services or cloud operations contracts. Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or equivalent experience. 5+ years of hands-on cloud security or network security engineering experience. 3+ years working specifically with Palo Alto Networks platforms.

Requirements

Working knowledge of: NIST 800-53 / NIST CSF CIS Controls / Benchmarks State RAMP security standards (DIR, TAC 202)
Experience performing security assessments and cloud compliance reviews.
Expert-level experience with Palo Alto Prisma Cloud CSPM, CWPP, CIEM, container & serverless security Policy management and remediation workflows
Hands-on experience with Palo Alto Cortex Cortex XDR, XSOAR automation, incident response SOC integration and threat hunting
Advanced proficiency with Palo Alto Panorama Centralized firewall management Policy creation, NAT, security profiles, logging & reporting
Strong understanding of AWS, Azure, and/or GCP cloud architectures.
Expertise in network security: firewalls, IPS/IDS, VPNs, segmentation.
Experience with SIEM platforms (Splunk, Sentinel, etc.) and log analytics.
Strong communication and documentation skills.
Ability to manage competing priorities in a multi-agency environment.
Problem-solving and analytical-thinking skills.
Experience working in regulated government or public-sector environments.
Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or equivalent experience.
5+ years of hands-on cloud security or network security engineering experience.
3+ years working specifically with Palo Alto Networks platforms.

Nice To Haves

Familiarity with Terraform, CloudFormation, or other IaC tools (preferred).
Palo Alto certifications: PCNSA, PCNSE, PCCET, Prisma Cloud Certified Engineer
Cloud certifications: AWS Solutions Architect, Azure Security Engineer, Google Professional Cloud Security Engineer
Experience supporting State government cloud programs.
Previous involvement in managed services or cloud operations contracts.

Responsibilities

Deploy, configure, and manage Palo Alto Prisma Cloud for cloud workload protection, CSPM, CIEM, container security, and serverless security.
Integrate and optimize Palo Alto Cortex XDR/XSOAR for threat detection, response automation, and incident investigation.
Manage and maintain firewall policies, device groups, and templates using Palo Alto Panorama.
Support hybrid and multi-cloud security architectures for customers.
Conduct configuration reviews, health checks, and periodic audits of cloud security controls.
Ensure alignment with client security requirements, NIST, FedRAMP, CIS Benchmarks, and state-specific regulatory controls.
Implement continuous compliance monitoring using Prisma Cloud and cloud-native tools.
Develop documentation, security policies, runbooks, and architecture diagrams.
Work with state cybersecurity teams to provide root-cause analysis and threat mitigation strategies.
Provide guidance on cloud security best practices, onboarding, and integration of Palo Alto solutions.
Collaborate with cross-functional DIR teams, vendors, cloud providers, and compliance personnel.