[Hiring] Senior Cloud Native Security Architect @Palo Alto Networks

Role Description

As a member of the Cloud Native Security Services team you’ll work directly with Idira (formerly CyberArk) customers to understand, plan, and implement complex product use cases across business critical environments.

• Lead customer engagements including scoping work, directing other team members, acting as the primary point of contact for project stakeholders, running calls and workshops, and providing regular project updates.
• Pro-actively initiate and contribute to internal initiatives.
• Consistently apply (and confidently speak on) cloud security best practices.
• Actively engage in team/group level strategy and goal setting activities.
• Act as a peer mentor to your fellow team members, including providing regular feedback for personal and professional development.

You will succeed in this role if you:

• Are comfortable working directly with customer stakeholders at all levels (i.e. senior management - individual contributors).
• Are able to effectively empathise with and translate between stakeholders across different domains (i.e. infosec, operations, product R&D, senior leadership).
• Enjoy working in complex (and often ambiguous) problem domains.
• Show up to calls with empathy, patience, positivity, and the desire to collaborate towards shared goals.
• Easily move between different levels of abstraction (high level architecture and solution design - implementation detail and configuration).
• Enjoy learning and can quickly become a subject matter expert in previously unfamiliar domains.
• Inspire confidence and restore calm in otherwise tense or strained situations.
• Approach challenges pragmatically, preferring actions that produce meaningful customer value over polish and philosophical alignment.

Qualifications

• Kubernetes - self-managed (Openshift, K3s, etc.) and cloud managed (GKE, Autopilot, EKS, etc.)
• Container runtimes (Docker / containerd / podman)
• SPIFFE / SPIRE (for workload identity)
• Linux / Unix operating systems (RHEL / Rocky Linux / Ubuntu / Debian)
• Cloud networking (VPCs, firewalls, network peering, VPNs)
• Cloud IAM (predominantly GCP and AWS)
• Cloud databases (Cloud SQL, Spanner, DynamoDB, Bigtable, etc.)
• Golang / Python (for gluing services and deployment scripting)
• Terraform / Crossplane / Config Connector (GCP) / CloudFormation (AWS) (for deploying and managing cloud infrastructure)
• Git (for source control)
• Github Actions / Jenkins (for CI)
• Argo CD / Flux (for CD)
• Vault / Conjur (for secrets management)

Requirements

• A strong foundation of security best practices.
• A working knowledge of Kubernetes and the major cloud platforms (GCP, AWS, etc.).
• Experience with any of the other listed technologies is a huge advantage.

Benefits

• Ability to offer positions at lower levels if the fit is good but experience needs development.
• Capacity in the team to mentor.
• Encouragement to apply even if unsure of qualifications or fit.