Domain Consultant - Next-Gen Trust Security

About the role

Palo Alto Networks is hiring a remote Domain Consultant for its Next-Gen Trust Security (NGTS) portfolio, following its integration with CyberArk. As the technical subject matter expert for Machine Identity Management, you will define solutions that secure critical business needs and act as the technical bridge between the Network Security teams and Identity stakeholders, keeping enforcement systems (NGFW/SASE) in sync as certificate lifecycles shorten.

Key responsibilities

• Lead Proof of Value engagements and technical validations for NGTS, demonstrating operational resilience and outage elimination
• Design unified cryptographic governance models in Strata Cloud Manager that align certificate operations with network enforcement
• Identify critical projects and actions needed to reach a customer's security end state, removing sales obstacles
• Educate CISOs and executive stakeholders on the risks of long certificate lifecycles and the path to Post-Quantum Cryptography
• Share customer usage patterns with product teams to improve adoption of NGTS/Machine Identity Management
• Run discovery sessions to find unmanaged or rogue certificates using network-native tools
• Partner with Solutions Consultants, Account Managers and the CyberArk MIM specialist team on account-based pursuits
• Drive adoption of Secure Flex credits by helping customers consolidate CLM/PKI tools into a single control plane

Required profile

• 5+ years of Sales Engineering or consulting experience with a cybersecurity software vendor
• Bilingual German is required
• CISSP or equivalent information security certification preferred
• No immigration sponsorship available for this position

Required skills

• Extensive experience with Certificate Lifecycle Management, ZTPKI and Microsoft ADCS, and SSL/TLS
• Automated provisioning (ACME, SCEP) and cloud connectors (Azure, GCP, AWS)
• Strong understanding of NGFW, SASE and GlobalProtect architectures
• DevOps tools (Terraform, Git, Kubernetes, Ansible) and Docker are a significant benefit