Global Solutions Architect - AI and Automation

Our Mission

At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place.

Who We Are

In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us!

This role is remote, but distance is no barrier to impact. Our hybrid teams collaborate across geographies to solve big problems, stay close to our customers, and grow together. You will be part of a culture that values trust, accountability, and shared success where your work truly matters.

Job Summary

The Technical Services Center of Excellence (CoE) builds the platforms, tooling and AI capabilities our engineers use to deliver security outcomes for customers. As Global Solutions Architect for AI Network Security, you will own the automation strategy for network security delivery. That spans traditional automation (scripting, API integrations, configuration management and workflow orchestration) as well as AI, which now plays a central role in the work. That includes assessing deployments, prescribing improvements, automating migrations, and providing conversational and agentic tools to consultants worldwide.

This is a full-stack role in the broadest sense. You are expected to be deeply fluent across the entire stack: frontend, backend, data, cloud infrastructure, CI/CD, networking and cybersecurity. You also need to understand how modern AI systems work and how they fail. You design zero trust into everything you build, you understand the threat landscape for LLMs and autonomous agents, and you know the controls that address it. You reason from first principles, ship to production, and raise the engineering standard of the people around you.

The role sits where business leadership, thought leadership and technical depth meet. You turn leadership priorities into technical direction, shape how the organization thinks about AI and security, and deliver working capabilities to our field teams in Customer Success and Professional Services. You report regularly to senior leadership within Technical Services, and you build the relationships across business units that let Technical Services execute more efficiently.

Your Impact

• Own the Technical Services automation portfolio end to end: scripts, API integrations against PAN-OS, Strata Cloud Manager and Prisma APIs, configuration migration and validation tooling, and workflow orchestration. Choose deterministic automation or AI based on what the problem needs.
• Architect and own production platforms that run maturity and security assessments across NGFW, Strata Cloud Manager, Prisma Access, Cloud-Delivered Security Services and Prisma SD-WAN.
• Design assessment catalogs, parsers and evaluators with measurable accuracy: parser coverage, license-entitlement gating, and readiness reported as measured rather than rounded up.
• Design and operate multi-agent AI systems on frontier models (for example Gemini and Claude on Vertex AI), including tool design, agent loops, structured outputs, retrieval, refusal handling and output-quality evaluation.
• Apply zero trust principles end to end: identity-based, per-request access for users, services and AI agents; least-privilege, short-lived credentials; segmented workloads; encryption in transit and at rest; continuous verification and telemetry.
• Secure AI systems by design. Threat-model agents and LLM features, defend against direct and indirect prompt injection, constrain agent autonomy and tool permissions, protect sensitive data in prompts, context and retrieval, and add guardrails and human approval where actions carry risk.
• Build full-stack features in TypeScript, Python and React, with authorization, tenant isolation (row-level security), credential encryption and audit logging designed in from the start.
• Operate CI/CD pipelines and Terraform-managed infrastructure on GKE across multiple regions, owning supply-chain controls, data residency, rollout safety, observability and incident follow-through.
• Validate platform changes against live firewall, Prisma Access and SD-WAN lab environments before release.
• Lead harness engineering for the Center of Excellence. Design and maintain the agent harnesses, skills, MCP servers, sub-agent roles, hooks, context files and quality gates that let engineers use coding agents (Claude Code or similar) safely and productively.
• Make the Center of Excellence measurably more productive across its release schedule. Apply automation and AI to documentation, enablement content, service SKU development and launch readiness, so that new services and releases ship on time with complete supporting material.
• Act as the bridge between business leadership and engineering: translate Technical Services priorities into architecture, roadmaps and delivered capabilities, and explain technical trade-offs in business terms.
• Provide regular updates to senior leadership within Technical Services on progress, risks, automation ROI (hours saved, adoption, engagement outcomes) and AI spend.
• Deliver tooling, enablement and reference architectures to field teams in Customer Success and Professional Services, and use their feedback to shape what gets built next.
• Act as a thought leader on AI and network security: publish guidance, present at internal forums, and shape the practice's point of view on secure AI adoption.
• Collaborate across business units, including Product, Engineering, Sales, Security and IT, and build relationships that remove friction and help Technical Services execute more efficiently.
• Contribute to open-source SDKs for Palo Alto Networks APIs.
• Mentor engineers, publish reference implementations, and hold regular office hours.

Qualifications

Required

• 8-12 years of professional software development experience. This includes at least one full-stack system you designed, shipped to production, and continued to own after launch.
• Expert full-stack engineering across every layer: modern frontend frameworks (React or similar), backend APIs and services, relational data modeling and SQL, cloud infrastructure, containers and Kubernetes, infrastructure as code, and CI/CD. Working proficiency in TypeScript and Python.
• Applied first-principles design: you can show a past architecture decision where you named the underlying constraint, chose what not to build, and justified the result.
• Software design and testing discipline: clear interfaces, separation of concerns, dependency injection, and automated tests enforced in CI.
• Strong cybersecurity foundation: application security (OWASP Top 10, secure coding, threat modeling), identity and access management (OAuth 2.0, OIDC, mTLS, RBAC), secrets and key management, and secure software supply chain practices (dependency pinning, SBOMs, provenance).
• Zero trust architecture: you can explain and apply NIST SP 800-207 principles and the CISA Zero Trust Maturity Model pillars (identity, devices, networks, applications and workloads, data) to a real system you built or secured.
• Network and security engineering: routing, segmentation, policy, VPN, SASE and threat prevention. You can deploy and test against a firewall, SASE or SD-WAN environment.

…