Senior Product Manager, Web Proxy & Secure Web Gateway (SWG) (hybrid)

Palo Alto Networks•Office - USA - CA - Headquarters, CA

7d•$153,000 - $247,500•Hybrid

About The Position

Palo Alto Networks is seeking a Senior Product Manager to lead product strategy, roadmap development, and customer adoption for enterprise web proxy capabilities within its Next-Generation Firewall (NGFW) platform. The role defines how organizations can modernize and consolidate legacy forward proxy and Secure Web Gateway architectures using PAN-OS, Panorama, and Strata Cloud Manager (SCM). This role combines network security expertise with customer-focused product management. The product manager works with engineering, UX, technical marketing, and field teams to deliver secure, scalable, and intuitive proxy solutions across physical firewalls and VM-Series deployments. Work includes explicit and transparent proxy architectures, HTTP/HTTPS traffic inspection, TLS decryption, identity-based authentication, routing, and centralized security policy management. The position is hybrid. Palo Alto Networks says most teams work from the office full time, with flexibility when needed, to support collaboration and real-time problem-solving.

Requirements

At least 5 years of experience in product management, technical product management, technical marketing, or engineering leadership, including defining requirements or delivering enterprise networking or network security products.
At least 3 years of relevant experience with web proxy, forward proxy, Secure Web Gateway (SWG), next-generation firewall (NGFW), or closely related network security technologies.
Strong understanding of enterprise networking and web traffic flows, including HTTP/HTTPS, TCP/IP, TLS/SSL, proxy deployment models, and network address translation (NAT).
Working knowledge of explicit and transparent proxy architectures, including configuration, deployment considerations, and enterprise security use cases.
Experience translating technical networking or security requirements into product roadmaps, PRDs, user stories, and engineering deliverables.
Demonstrated ability to partner with software engineering teams on architecture, technical trade-offs, feature prioritization, and product execution.
Experience conducting customer discovery, evaluating product adoption challenges, and using customer feedback and data to prioritize product improvements.
Strong communication, stakeholder management, and cross-functional collaboration skills.

Nice To Haves

Experience with Secure Web Gateway products, legacy web proxy modernization, proxy consolidation, or migration from enterprise proxy platforms.
Familiarity with TLS inspection, SSL decryption, proxy auto-configuration (PAC) files, CONNECT methods, SNI validation, DNS Security, and domain fronting prevention.
Knowledge of identity and authentication technologies, including Kerberos, SAML 2.0, and cloud identity integrations.
Experience with PAN-OS, Panorama, Strata Cloud Manager, Palo Alto Networks NGFWs, or comparable enterprise firewall and security management platforms.
Familiarity with CLI, REST APIs, GUI-based configuration, policy management, and network troubleshooting workflows.
Understanding of Zero Trust Network Access (ZTNA), Secure Access Service Edge (SASE), Security Service Edge (SSE), or cloud-delivered security architectures.
Experience using AI-assisted product management tools, generative AI, LLMs, analytics, or rapid prototyping to improve product development workflows.
Bachelor's or Master's degree in Computer Science, Electrical Engineering, or a related technical field, or equivalent practical experience.

Responsibilities

Define and execute a 12–18 month roadmap for enterprise Web Proxy and Secure Web Gateway capabilities on NGFW platforms, aligning it with customer requirements, security outcomes, and business priorities.
Lead the end-to-end customer migration experience from traditional web proxy and SWG environments to consolidated NGFW-based architectures managed through PAN-OS, Panorama, and Strata Cloud Manager.
Translate customer and technical requirements into capabilities for explicit proxy, transparent proxy, forward proxy, HTTP/HTTPS traffic handling, loopback interfaces, Destination NAT (DNAT), and upstream traffic steering.
Partner with engineering to improve HTTPS inspection, TLS decryption, CONNECT and Server Name Indication (SNI) validation, domain fronting prevention, DNS Security integration, and advanced threat prevention.
Define authentication and user identity experiences using technologies such as Kerberos, SAML 2.0, and Palo Alto Networks Cloud Identity Engine.
Own and improve customer workflows across CLI, REST APIs, and GUI for deployment, policy configuration, troubleshooting, and operational visibility.
Conduct customer discovery, analyze migration barriers, define product requirements documents and acceptance criteria, and prioritize capabilities based on customer value, technical feasibility, and business impact.
Collaborate with engineering, UX/design, technical marketing, sales engineering, and go-to-market teams to launch features, support strategic customer opportunities, and accelerate adoption.
Establish and monitor product adoption, migration success, configuration efficiency, deployment readiness, and troubleshooting metrics, including mean time to resolution (MTTR).
Use generative AI, large language models, analytics, and rapid prototyping tools to improve product discovery, requirements development, customer insight analysis, and product delivery while maintaining accuracy and responsible use.