Perimeter Security Operations Manager

Role Summary

We are seeking a hands-on Perimeter Security Operations Manager who thrives on complex challenges and leads through technical expertise, sound judgment, and influence. This senior technical leadership role guides global perimeter security projects, major incidents, and service improvements across physical, virtual, and cloud environments. Although the role does not directly supervise staff, it is expected to lead cross-functional teams and coach others as a trusted subject matter expert.

Key Responsibilities

• Lead global projects, technical workstreams, major incidents, and cross-functional efforts involving firewalls, secure web access, intrusion prevention, URL filtering, VPN, remote access, and related perimeter controls.
• Design and guide secure, resilient, scalable, and supportable solutions aligned with enterprise architecture, security standards, and operational requirements.
• Serve as a trusted escalation point for complex security problems; analyze evidence, challenge assumptions, identify root causes, and drive issues to resolution.
• Proactively identify insecure configurations, control gaps, weak designs, technical debt, and emerging risks—even when outside the immediate assignment—and drive appropriate remediation.
• Provide technical direction for Palo Alto Networks environments, including PAN-OS, Panorama, Prisma Access, GlobalProtect, Strata Cloud Manager, security and NAT policy, routing, Threat Prevention, WildFire, DNS Security, IPSec VPN, high availability, upgrades, and lifecycle management.
• Review high-risk changes, firewall rules, designs, exceptions, failure modes, monitoring, recovery requirements, and operational readiness; recommend practical alternatives when proposed solutions create unnecessary risk or complexity.
• Improve service reliability and efficiency through automation, APIs, scripting, orchestration, monitoring, standards, runbooks, and workflow improvements across ServiceNow, Tufin, Splunk, Datadog, and Palo Alto platforms.
• Apply approved AI capabilities, including Microsoft 365 Copilot and vendor-provided features, to accelerate analysis, troubleshooting, documentation, and policy review; validate outputs against authoritative technical evidence and security requirements.
• Use operational data to reduce recurring issues, manual effort, risk, and cycle time while improving service quality and control effectiveness.
• Coach engineers, strengthen technical judgment, communicate risks and decisions clearly, and influence teams and partners without direct authority.
• Support a global operating model, including critical incidents and planned activities outside standard business hours when necessary.

Required Qualifications

• Five or more years of progressive experience in network security, perimeter security, infrastructure security, or a related field.
• Two or more years leading complex security projects, technical workstreams, major incidents, service improvements, or global cross-functional efforts.
• Significant hands-on experience designing, administering, and troubleshooting Palo Alto Networks technologies in a large enterprise environment.
• Demonstrated experience with PAN-OS, Panorama, Prisma Access, and GlobalProtect, including policy, NAT, objects, templates, routing, logging, authentication, high availability, upgrades, and troubleshooting.
• Strong understanding of TCP/IP, DNS, DHCP, BGP, OSPF, NAT, IPSec, TLS, packet flow, network segmentation, and Layer 3 through Layer 7 security concepts.
• Proven ability to own unfamiliar or ambiguous problems, assess incomplete or conflicting evidence, make risk-based decisions, and lead issues to resolution.
• Demonstrated ability to design supportable enterprise solutions and recognize design flaws, control gaps, unintended consequences, and emerging risks.
• Experience with incident, problem, change, request, vulnerability, lifecycle, and capacity-management practices.
• Strong communication and influencing skills, including the ability to explain technical issues, risks, decisions, and trade-offs to technical and executive audiences.

Preferred Qualifications

• Experience with Palo Alto Networks Strata Cloud Manager, including centralized policy management, configuration, monitoring, and troubleshooting.
• Palo Alto Networks certification such as PCNSE or an equivalent advanced certification.
• Experience with public-cloud networking and security in Azure, AWS, or Google Cloud.
• Experience with SASE, Zero Trust Network Access, secure web gateways, Web Application Firewalls, DDoS protection, DNS security, and related cloud-delivered capabilities.
• Experience using approved enterprise AI tools, APIs, scripting, orchestration, and automation to improve security operations and reduce manual work.
• Experience with ServiceNow, Tufin, Splunk, Datadog, Power BI, or comparable security and operations platforms.
• Bachelor's degree in a related discipline, equivalent practical experience, or relevant certifications such as CISSP, CCNP Security, cloud security, or ITIL.

The Candidate We Want

You are one of the people others turn to when the problem is complex, the path is unclear, or the consequences matter. You combine deep technical expertise with strong engineering judgment and genuine care for the environment. You notice when something is insecure, fragile,

or unnecessarily complex—and you do not walk past it. You investigate, explain the risk, engage the right people, and drive a secure and supportable resolution. You lead through expertise, credibility, ownership, and influence, and you leave services, processes, projects, and teams better than you found them.