Posted today
Public Trust
$145,000 - $160,000
Unspecified
IT - Hardware
Remote/Hybrid• (Off-Site/Hybrid)
Zachary Piper Solutions is seeking a Prisma + Strata Cloud Manager responsible for day-to-day operations and continuous improvement across Palo Alto Networks stack, code-to-cloud security and compliance, unified management of NGFW, Prisma Access/SASE, and SD‑WAN. The role centers on policy governance, risk reduction, operational resilience, and AI‑guided optimization, ensuring consistent Zero Trust enforcement across hybrid/multi-cloud and network environments. This position is fully remote.
Key Responsibilities
Required Qualifications
Preferred
Compensation:
$145,000-$160,000/year with potential bonus **depending on years of experience and degree**
Full Benefits -Medical, Dental, Vision, 401K, Paid Holidays, PTO, Sick Leave if required by law
This job opens for applications on 12/15/2025. Applications for this job will be accepted for at least 30 days from the posting date
#LI-Onsite
#LI-GC2
Key Responsibilities
- Configure and tune CSPM/CWP/CIEM controls, IaC scanning, vulnerability management, runtime protection, and compliance reporting across AWS/Azure/GCP and Kubernetes.
- Integrate code scanning and pipeline controls (SCA, secrets, IaC) into CI/CD; drive developer remediation workflows and ticketing/SIEM integrations.
- Prioritize misconfigurations and exploit paths using Prisma Cloud's unified risk context; maintain policy baselines and alert hygiene.
- Automate evidence collection and dashboards (e.g., CIS, PCI DSS, HIPAA/GDPR) and deliver executive reporting on cloud risk and compliance attestation.
- Administer policies and configurations across Next‑Generation Firewalls (NGFWs), Prisma Access, and SD‑WAN from one cloud interface; eliminate shadow policies and enforce best practices.
- Leverage AI-driven predictive analytics to forecast capacity and deployment health, preventing outages and reducing MTTR.
- Use intent-driven dashboards (security posture, application/user experience) to detect configuration gaps and optimize user performance.
- Standardize SOPs for onboarding firewalls, GlobalProtect, and SASE tenants; manage upgrades, licensing, and change windows.
- Align network and cloud controls to the organization's risk appetite; maintain consistent segmentation, identity, and data protection policies.
- Lead triage of cloud/runtime and network events; correlate Prisma Cloud alerts with NGFW/SASE telemetry; drive root cause and postmortems.
- Support internal/external audits and regulatory examinations; provide evidence and narrative for control effectiveness across cloud and network.
- Partner with SecOps, DevOps, NetOps, and App teams; deliver playbooks, runbooks, and training to raise operational maturity.
Required Qualifications
- 5-8+ years in cloud and/or network security operations with Palo Alto Networks technologies (Prisma Cloud, NGFW, Panorama/Strata Cloud Manager, Prisma Access/SASE).
- Proven experience implementing CNAPP capabilities (CSPM/CWP/CIEM, IaC scanning, runtime protection) and delivering compliance reporting.
- Hands-on policy engineering for NGFW/SASE with AI‑guided posture checks and AIOps analytics in Strata Cloud Manager.
- Strong background in public cloud (AWS/Azure/GCP), Kubernetes, and CI/CD tooling; ability to embed security controls into developer workflows.
- Demonstrable incident response skills across distributed systems; SIEM/SOAR integrations and playbook development.
Preferred
- Certifications: PCNSE, Prisma Cloud, or relevant cloud security certifications (e.g., CCSK, AZ‑500, AWS Security). (Role-specific but not vendor-cited)
- Experience migrating policies from Panorama to Strata Cloud Manager, or leading large-scale NGFW/SASE deployments.
- Familiarity with AI-driven posture analysis and predictive outage prevention in Strata Cloud Manager.
Compensation:
$145,000-$160,000/year with potential bonus **depending on years of experience and degree**
Full Benefits -Medical, Dental, Vision, 401K, Paid Holidays, PTO, Sick Leave if required by law
This job opens for applications on 12/15/2025. Applications for this job will be accepted for at least 30 days from the posting date
#LI-Onsite
#LI-GC2
group id: 10430981