Our Mission At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place.
Who We Are In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us! This role is remote, but distance is no barrier to impact. Our hybrid teams collaborate across geographies to solve big problems, stay close to our customers, and grow together. You will be part of a culture that values trust, accountability, and shared success where your work truly matters. Job Summary We are seeking a Practice Architect, Delivery Architecture with deep technical expertise in Cortex XSIAM and a strong Security Operations Center (SOC) background to join our Center of Excellence (COE). As a hands-on technical leader, you will bridge the gap between architectural design and real-world field execution. You will participate directly in complex customer deployments, validate delivery methodologies in live environments, and identify and remove friction points to ensure our services are repeatable, scalable, and optimized for customer outcomes. Operating at the intersection of Professional Services, Scale & Optimize (S&O), and the COE, you will bring field execution insights back into our delivery architecture, helping ensure our methodologies and frameworks are not only technically sound, but proven in practice. Key
Responsibilities Field Execution & XSIAM Delivery Validation Hands-on Deployment: Actively participate in customer deployments to test and validate COE delivery frameworks, playbooks, and tools in live customer environments. Technical Escalation: Serve as the senior technical authority and escalation point for complex, high-risk, or large-scale Cortex XSIAM deployments. Execution Alignment: Ensure delivery patterns are practical, efficient, and tailored to the operational realities of modern enterprise SOCs. Delivery Architecture & Execution Design Architectural Standards: Define, refine, and standardize delivery architecture patterns to ensure consistent execution across products, regions, and delivery models. Deployment Sequencing: Establish best practices for implementation dependencies, integration points, and sequencing across Cortex (XSIAM, XDR, XSOAR, XPANSE), Cloud, and Network Security platforms. Operational Bridge: Ensure solution architectures seamlessly translate into day-to-day operational success for customer SOC teams. Lifecycle Validation & Continuous Improvement End-to-End Delivery: Oversee the deployment lifecycle from initial kickoff through optimization, ensuring smooth handoffs between Professional Services and Scale & Optimize teams. Friction Reduction: Identify where deployments stall, diagnose execution gaps, and feed structured, actionable feedback back into COE frameworks and engineering teams. Pilot Rollouts: Lead and validate pilots for new delivery models, tooling, and automation prior to global rollout. Collaboration & Enablement Cross-Functional Alignment: Partner with Professional Services, S&O, Product/Engineering, and Regional Leadership to align global COE standards with regional field needs. Mentorship & Playbooks: Contribute to field enablement by authoring runbooks, delivery playbooks, and best practices. Mentor consultants and architects on advanced execution strategies.
Qualifications Proven track record of successfully delivering multiple end-to-end Cortex XSIAM projects in complex customer environments. Hands-on experience working in or closely with modern SOC environments, with a strong understanding of SIEM/SOAR transformations, threat detection, incident response workflows, and data ingestion architectures. Expertise across the Palo Alto Networks Cortex portfolio (XSIAM, XDR, XSOAR, XPANSE); familiarity with Prisma Cloud/Network Security is a plus. Significant background in Professional Services, Technical Consulting, or Systems Integration delivering large-scale enterprise cybersecurity solutions. Ability to identify execution gaps in real time and engineer practical, scalable solutions. Demonstrated ability to influence, communicate, and collaborate across technical teams, product managers, and executive stakeholders.
Compensation Disclosure The
compensation offered for this position will depend on
qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/com-missioned roles) is expected to be the annual range listed below. The offered
compensation may also include restricted stock units and a
bonus. A description of our employee
benefits may be found here . $163,000.00 - $224,500.00/yr Our Commitment We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at [email protected] . Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines. Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.
About Cortex by Palo Alto Networks
Demisto Enterprise is a security operations platform that combines intelligent automation and collaboration into a single ChatOps interface. It combines security orchestration and automation, incident management, and interactive investigation to help security teams meet these challenges and best leverage existing and new security investments.
Demisto’s automation is provided by DBot, who interacts with your team via ChatOps for playbook-based workflows, cross-correlation, and information sharing, helping security teams scale while working and learning the way humans are wired to – together.
The company was founded in 2015 and is based in Cupertino, California.
