Principal Product Manager – AI Agents for Branch Network Operations

Palo Alto Networks•Office - USA - CA - Headquarters, CA

2d•$176,800 - $286,000•Onsite

About The Position

Palo Alto Networks is hiring a Product Manager to build AI agents that handle day-to-day branch operations: finding and fixing network problems, checking security posture, and recommending software upgrades. This work is part of Strata Cloud Manager and spans our NGFW and SASE products. This is a hands-on role. You will write the specs, design the user experience, talk to customers every week, and work closely with engineering to ship. You will also own the product strategy and help us sell it, both directly to enterprises and through partners.

Requirements

7+ years of product management experience in networking, network security, or IT infrastructure.
A track record of shipping management, monitoring, or troubleshooting products. SaaS experience preferred.
Experience building products that use AI, machine learning, or large language models.
Strong networking basics: TCP/IP, routing, DNS, DHCP, VLANs. You can work through a network problem from the physical layer up to the application.
Good understanding of branch security: firewalls, SASE, SD-WAN, and identity-based access.
Experience building product strategy end to end: market sizing, positioning, pricing, and business cases.
Experience taking products to market through direct enterprise sales and through partners such as resellers, MSPs, and MSSPs.
You write your own specs and build your own prototypes.
Clear writing and speaking. You can explain technical ideas to engineers, executives, and sales teams.
You work well with others, take ownership, and are comfortable when the plan isn't fully defined yet.
Bachelor's degree in Computer Science, Electrical Engineering, or a related field, or equivalent experience.

Nice To Haves

Experience with AI agents is a strong plus.
Experience with wired switching (Spanning Tree, PoE, 802.1X, network segmentation) or enterprise Wi-Fi (RF design, roaming, client onboarding, RADIUS).
Past work as a network engineer, support engineer, sales engineer, or architect before moving into product.
Experience with cloud-managed networking or AIOps products.
Experience building multi-tenant or MSP-ready platforms.
Familiarity with how AI agents are built: retrieval, tool calling, multi-agent setups, and evaluation.
Certifications such as CCNP, CCIE, CWNA, or PCNSE.
Master's degree or MBA.

Responsibilities

Set the product strategy and roadmap for AI agents that run branch operations: troubleshooting, posture checks, configuration health, and software upgrade recommendations.
Start from the customer's problem, not the existing workflow. Figure out which tasks admins should never have to do by hand again.
Talk to network admins, security teams, MSPs, and support engineers to learn how branch problems are found and fixed today, and where it goes wrong.
Write clear PRDs and user stories. Spell out what each agent does, what data it uses, when it acts on its own, and when it asks a person for approval.
Design how people work with agents. Build mockups and prototypes yourself, and test them with customers before engineering starts.
Make sure agents explain their findings and actions so admins can check the work and trust it.
Define safety rules for agents that make changes on live networks, including approvals, limits, and rollback.
Track whether it's working: accuracy, time to fix issues, tickets avoided, upgrade success, and adoption. Use the results to decide what to build next.
Define packaging and pricing so these features grow revenue and adoption.
Help sell to large enterprise customers: lead briefings, run design partner programs, and turn early users into references.
Make the product work for partners and MSPs, including multi-tenant management, delegated access, and a business model they can resell.
Build sales and partner enablement: demos, playbooks, competitive comparisons, and training.
Work closely with engineering, AI/ML, design, support, sales, marketing, and channel teams, and with other product teams across NGFW, SASE, and SD-WAN.