Practice Architect, Delivery Architecture (COE)

Our Mission

At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place.

Who We Are

In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us!

Job Summary

We are seeking a Practice Architect, Delivery Architecture with deep technical expertise in Cortex XSIAM and a strong Security Operations Center (SOC) background to join our Center of Excellence (COE).

As a hands-on technical leader, you will bridge the gap between architectural design and real-world field execution. You will participate directly in complex customer deployments, validate delivery methodologies in live environments, and identify and remove friction points to ensure our services are repeatable, scalable, and optimized for customer outcomes.

Operating at the intersection of Professional Services, Scale & Optimize (S&O), and the COE, you will bring field execution insights back into our delivery architecture, helping ensure our methodologies and frameworks are not only technically sound, but proven in practice.

Key Responsibilities

Field Execution & XSIAM Delivery Validation

• Hands-on Deployment: Actively participate in customer deployments to test and validate COE delivery frameworks, playbooks, and tools in live customer environments.

• Technical Escalation: Serve as the senior technical authority and escalation point for complex, high-risk, or large-scale Cortex XSIAM deployments.

• Execution Alignment: Ensure delivery patterns are practical, efficient, and tailored to the operational realities of modern enterprise SOCs.

Delivery Architecture & Execution Design

• Architectural Standards: Define, refine, and standardize delivery architecture patterns to ensure consistent execution across products, regions, and delivery models.

• Deployment Sequencing: Establish best practices for implementation dependencies, integration points, and sequencing across Cortex (XSIAM, XDR, XSOAR, XPANSE), Cloud, and Network Security platforms.

• Operational Bridge: Ensure solution architectures seamlessly translate into day-to-day operational success for customer SOC teams.

Lifecycle Validation & Continuous Improvement

• End-to-End Delivery: Oversee the deployment lifecycle from initial kickoff through optimization, ensuring smooth handoffs between Professional Services and Scale & Optimize teams.

• Friction Reduction: Identify where deployments stall, diagnose execution gaps, and feed structured, actionable feedback back into COE frameworks and engineering teams.

• Pilot Rollouts: Lead and validate pilots for new delivery models, tooling, and automation prior to global rollout.

Collaboration & Enablement

• Cross-Functional Alignment: Partner with Professional Services, S&O, Product/Engineering, and Regional Leadership to align global COE standards with regional field needs.

• Mentorship & Playbooks: Contribute to field enablement by authoring runbooks, delivery playbooks, and best practices. Mentor consultants and architects on advanced execution strategies.

Qualifications

• Proven track record of successfully delivering multiple end-to-end Cortex XSIAM projects in complex customer environments.
• Hands-on experience working in or closely with modern SOC environments, with a strong understanding of SIEM/SOAR transformations, threat detection, incident response workflows, and data ingestion architectures.
• Expertise across the Palo Alto Networks Cortex portfolio (XSIAM, XDR, XSOAR, XPANSE); familiarity with Prisma Cloud/Network Security is a plus.
• Significant background in Professional Services, Technical Consulting, or Systems Integration delivering large-scale enterprise cybersecurity solutions.
• Ability to identify execution gaps in real time and engineer practical, scalable solutions.
• Demonstrated ability to influence, communicate, and collaborate across technical teams, product managers, and executive stakeholders.

Compensation Disclosure

The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/com-missioned roles) is expected to be the annual range listed below. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found here.

Our Commitment

We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together.

We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at  accommodations@paloaltonetworks.com.

Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.

All your information will be kept confidential according to EEO guidelines.