Primary Role

The Senior Technologist Palo Alto Cyber Specialist will be responsible for Palo Alto Firewall and SASE implementation, and management of our organization's Palo Alto Cyber security systems. This role involves monitoring, analyzing performance, and responding to requests and incidents, ensuring the protection of our network infrastructure and sensitive data. The ideal candidate has a strong background in cybersecurity, hands on experience with Palo Alto Firewalls, SASE, Strata Cloud Manager, XDR, and Zero-Trust principles.

• Configure, maintain, and optimize Palo Alto Network Security technologies, including but not limited to VPN, SASE, SSPM, DLP, physical and Cloud Firewalls.
• Develop and refine security rules, dashboards, and reports for proactive threat and error detection.
• Deploy firewall and SASE technologies, configure for industry best practices.
• Plan, implement, and maintain EDR policies and deployments, in coordination with cyber investigation and IT operations teams. Regularly assess the effectiveness of network and endpoint security solutions and suggest improvements.
• Develop and maintain documentation for Cyber processes, procedures, and configurations.
• Conduct periodic security assessments and audits using the Palo Alto Strata and Cortex Platforms.
• Assist response teams with cybersecurity investigations.

Key Accountabilities

• Monitor the status of network and endpoint security systems to include:
  • rule effectiveness and efficiency
  • device performance
  • Firewall and endpoint metrics
• Create and Enhance security documentation related to the Strata, Prisma and Cortex XDR platforms at American Water.   American Water is undergoing a large technology platform shift, and this role will be pivotal in creating and optimizing network and endpoint security technologies.

• Act as a technology direction lead for the Strata, Prisma, and Cortex XDR platforms, which includes providing detailed information and advice as necessary in that specialization in order to achieve business outcomes.

• Develop and/or promote technical solutions which support the business requirements. Be accountable for specific deliverables in relation Firewall and Endpoint Metrics, and technology effectiveness.

• Engage closely with stakeholders to understand what business objectives they want to accomplish through the network security platform and then work with the various technology teams to ensure the resiliency and disaster recovery needs are met.

Knowledge/Skills

• Excellent decision-making ability, balancing what is right with what is realistic
• Flexibility to adjust to multiple demands, shifting priorities, ambiguity, and rapid change
• Demonstrated ability to lead through influence and to deliver results through others while overcoming obstacles to success
• Possesses a high energy level, sense of urgency, decisiveness, and an ability to work well under pressure
• Strong knowledge of IT infrastructure, networking, and security principles.
• Strong knowledge of cybersecurity principles, threat hunting, and incident response.
• Managing security systems across geographically diverse and hybrid-cloud environments.
• Strong verbal and written communication skills for a wide variety of audiences including proven ability to deliver conference presentations Creative approach to problem-solving with the ability to focus on details while simultaneously maintaining the "big picture" view
• Experience with network security, firewalls, IDS/IPS, VPN, and endpoint protection solutions.
• Experience developing and maintaining DLP policies. Familiarity with Cloud architectures and technologies.
• Familiarity with log analysis, data normalization, and event correlation

Experience/Education

• Bachelors' degree in Computer Science, Information Systems, relevant field of Engineering or similar technology field. 
• 5+ years of hands-on experience with Network Security Devices, Palo Alto Networks platform and Strata Cloud Manager Preferred
• Experience with SASE security implementations and coordination of policies between SASE components.
• Experience managing EDR deployments across varying OS and device types, with direct Cortex XDR experience preferred.

Travel Requirements

• As necessary, up to 10%

Work Environment

• Primarily in an office environment

Competencies