You will define how organizations modernize and consolidate legacy forward proxy and Secure Web Gateway architectures using PAN-OS, Panorama, and Strata Cloud Manager (SCM).
This role combines deep network security knowledge with customer-focused product management. You will work closely with engineering, UX, technical marketing, and field teams to deliver secure, scalable, and intuitive proxy solutions across physical firewalls and VM-Series deployments.
Your work will span explicit and transparent proxy architectures, HTTP/HTTPS traffic inspection, TLS decryption, identity-based authentication, routing, and centralized security policy management.
Your Impact
Own Product Strategy and Roadmap: Define and execute a 12–18 month roadmap for enterprise Web Proxy and Secure Web Gateway capabilities on Palo Alto Networks NGFW platforms, aligned with customer requirements, security outcomes, and business priorities.
Lead Legacy Proxy Modernization: Drive the end-to-end customer migration experience from traditional web proxy and SWG environments to consolidated NGFW-based architectures managed through PAN-OS, Panorama, and Strata Cloud Manager.
Define Proxy Architecture and Workflows: Translate customer and technical requirements into product capabilities for explicit proxy, transparent proxy, forward proxy, HTTP/HTTPS traffic handling, loopback interfaces, Destination NAT (DNAT), and upstream traffic steering.
Advance Web Security and TLS Inspection: Partner with engineering to improve HTTPS inspection, TLS decryption, CONNECT and Server Name Indication (SNI) validation, domain fronting prevention, DNS Security integration, and advanced threat prevention.
Improve Identity-Based Access: Define authentication and user identity experiences using technologies such as Kerberos, SAML 2.0, and Palo Alto Networks Cloud Identity Engine.
Simplify Configuration and Management: Own customer workflows across command-line interfaces (CLI), REST APIs, and graphical user interfaces (GUI), improving deployment, policy configuration, troubleshooting, and operational visibility.
Translate Customer Needs into Product Requirements: Conduct customer discovery, analyze migration barriers, define product requirements documents (PRDs), establish acceptance criteria, and prioritize capabilities based on customer value, technical feasibility, and business impact.
Drive Cross-Functional Product Delivery: Collaborate with engineering, UX/design, technical marketing, sales engineering, and go-to-market teams to launch features, support strategic customer opportunities, and accelerate product adoption.
Measure Product Outcomes: Establish and monitor product adoption, migration success, configuration efficiency, deployment readiness, and troubleshooting metrics, including mean time to resolution (MTTR).
Apply AI to Product Management: Use generative AI, large language models (LLMs), analytics, and rapid prototyping tools to improve product discovery, requirements development, customer insight analysis, and product delivery while maintaining accuracy and responsible use.
Qualifications
Required Qualifications
5+ years of experience in product management, technical product management, technical marketing, or engineering leadership, including experience defining requirements or delivering enterprise networking or network security products.
3+ years of relevant experience with web proxy, forward proxy, Secure Web Gateway (SWG), next-generation firewall (NGFW), or closely related network security technologies.
Strong understanding of enterprise networking and web traffic flows, including HTTP/HTTPS, TCP/IP, TLS/SSL, proxy deployment models, and network address translation (NAT).
Working knowledge of explicit proxy and transparent proxy architectures, including configuration, deployment considerations, and enterprise security use cases.
Experience translating technical networking or security requirements into product roadmaps, PRDs, user stories, and engineering deliverables.
Demonstrated ability to partner with software engineering teams on architecture, technical trade-offs, feature prioritization, and product execution.
Experience conducting customer discovery, evaluating product adoption challenges, and using customer feedback and data to prioritize product improvements.
Strong communication, stakeholder management, and cross-functional collaboration skills.
Preferred Qualifications
Experience with Secure Web Gateway products, legacy web proxy modernization, proxy consolidation, or migration from enterprise proxy platforms.
Familiarity with TLS inspection, SSL decryption, proxy auto-configuration (PAC) files, CONNECT methods, SNI validation, DNS Security, and domain fronting prevention.
Knowledge of identity and authentication technologies, including Kerberos, SAML 2.0, and cloud identity integrations.
Experience with PAN-OS, Panorama, Strata Cloud Manager, Palo Alto Networks NGFWs, or comparable enterprise firewall and security management platforms.
Familiarity with CLI, REST APIs, GUI-based configuration, policy management, and network troubleshooting workflows.
Understanding of Zero Trust Network Access (ZTNA), Secure Access Service Edge (SASE), Security Service Edge (SSE), or cloud-delivered security architectures.
Experience using AI-assisted product management tools, generative AI, LLMs, analytics, or rapid prototyping to improve product development workflows.
Bachelor's or Master's degree in Computer Science, Electrical Engineering, or a related technical field, or equivalent practical experience.
Compensation Disclosure
The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/com-missioned roles) is expected to be the annual range listed below. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found here.
$153,000.00 - $247,500.00/yr
Our Commitment
We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together.
We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at accommodations@paloaltonetworks.com.
Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.
All your information will be kept confidential according to EEO guidelines.
Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.
