Device Security Engineer 14+ years of experience

Job Title : Device Security Engineer 14+ years of experience

Location: New York, NY (Hybrid)

We are currently seeking candidates who meet the following qualification

Mandatory Qualifications

• Implementation Engineering Evidence
  • Resume and project narrative identifying at least one completed production device-security, IoT/OT-security, or network-based asset-discovery implementation in which the candidate served as technical lead or primary implementation engineer.
  • Evidence must identify the platform, implementation scope, candidate responsibilities, production outcome, and a client or employer reference.
• Device Security Engineering Evidence
  • Project documentation demonstrating hands-on configuration and operation of Palo Alto Networks Device Security through Strata Cloud Manager.
  • Evidence must address device discovery, profiling, classification, inventory enrichment, risk assessment, policy recommendations, and production validation.
• Palo Alto Platform Evidence
  • Resume and project documentation demonstrating configuration and troubleshooting of PAN-OS, Panorama, and Next-Generation Firewalls, including traffic visibility, device telemetry, policy validation, and segmentation support.
• Integration Evidence
  • Architecture diagrams, configuration records, or project descriptions demonstrating integration with applicable enterprise systems such as Cortex XDR, Cortex XSOAR, Prisma Access, SIEM, ITSM, APIs, connectors, or authorized asset-information sources.
  • Only integrations included in the final CUNY scope will be evaluated as mandatory.
• Testing and Troubleshooting Evidence
  • Test records, issue summaries, or project descriptions demonstrating diagnosis and resolution of discovery gaps, classification errors, telemetry issues, connector failures, API errors, duplicate or inconsistent device records, and production-readiness defects.
• Automation and Data-Analysis Evidence
  • A technical description or sample artifact demonstrating use of APIs, PowerShell, Python, Postman, XQL, Git, or a comparable tool for data extraction, integration, validation, reporting, or repeatable engineering tasks.
• Technical Program Delivery Evidence
  • Resume and project artifacts demonstrating ownership of an integrated schedule, technical dependencies, risks, issues, change control, stakeholder coordination, implementation status reporting, and engineering decision tracking.
• Documentation and Knowledge-Transfer Evidence
  • Samples or descriptions of architecture diagrams, configuration records, integration procedures, test evidence, operating procedures, troubleshooting guides, and knowledge-transfer materials produced by the candidate.
• Certification Evidence
  • Copies of any current Palo Alto Networks, project-management, networking, IoT/OT, or security certifications claimed in the proposal.
  • Certifications are evaluated under the scored qualifications and are not required for pass/fail eligibility unless the final contract title requires them.

Duties/Responsibilities

• Lead hands-on configuration and operationalization of Palo Alto Networks Device Security through Strata Cloud Manager.
• Coordinate device discovery, classification, inventory enrichment, risk assessment, policy recommendations, segmentation requirements, and validation.
• Configure and validate integrations with Next-Generation Firewalls, Panorama, Prisma Access, Cortex XDR, Cortex XSOAR, SIEM, ITSM, and other authorized systems.
• Analyze device and network telemetry, troubleshoot discovery or integration issues, and manage technical resolution and escalation.
• Coordinate implementation with central cybersecurity, network, infrastructure, operations, vendor teams, and stakeholders across 25 colleges.
• Prepare architecture, configuration, integration, test, operating-procedure, status, governance, and operational handoff documentation.
• Provide knowledge transfer and support phased rollout, production validation, adoption, and transition to sustainable operations.