Practice Architect, Delivery Architecture (COE)

At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place.

In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us! This role is remote, but distance is no barrier to impact. Our hybrid teams collaborate across geographies to solve big problems, stay close to our customers, and grow together. You will be part of a culture that values trust, accountability, and shared success where your work truly matters.

We are seeking a Practice Architect, Delivery Architecture with deep technical expertise in Cortex XSIAM and a strong Security Operations Center (SOC) background to join our Center of Excellence (COE). As a hands-on technical leader, you will bridge the gap between architectural design and real-world field execution. You will participate directly in complex customer deployments, validate delivery methodologies in live environments, and identify and remove friction points to ensure our services are repeatable, scalable, and optimized for customer outcomes. Operating at the intersection of Professional Services, Scale & Optimize (S&O), and the COE, you will bring field execution insights back into our delivery architecture, helping ensure our methodologies and frameworks are not only technically sound, but proven in practice.

Field Execution & XSIAM Delivery Validation Hands-on Deployment: Actively participate in customer deployments to test and validate COE delivery frameworks, playbooks, and tools in live customer environments. Technical Escalation: Serve as the senior technical authority and escalation point for complex, high-risk, or large-scale Cortex XSIAM deployments. Execution Alignment: Ensure delivery patterns are practical, efficient, and tailored to the operational realities of modern enterprise SOCs. Delivery Architecture & Execution Design Architectural Standards: Define, refine, and standardize delivery architecture patterns to ensure consistent execution across products, regions, and delivery models. Deployment Sequencing: Establish best practices for implementation dependencies, integration points, and sequencing across Cortex (XSIAM, XDR, XSOAR, XPANSE), Cloud, and Network Security platforms. Operational Bridge: Ensure solution architectures seamlessly translate into day-to-day operational success for customer SOC teams. Lifecycle Validation & Continuous Improvement End-to-End Delivery: Oversee the deployment lifecycle from initial kickoff through optimization, ensuring smooth handoffs between Professional Services and Scale & Optimize teams. Friction Reduction: Identify where deployments stall, diagnose execution gaps, and feed structured, actionable feedback back into COE frameworks and engineering teams. Pilot Rollouts: Lead and validate pilots for new delivery models, tooling, and automation prior to global rollout. Collaboration & Enablement Cross-Functional Alignment: Partner with Professional Services, S&O, Product/Engineering, and Regional Leadership to align global COE standards with regional field needs. Mentorship & Playbooks: Contribute to field enablement by authoring runbooks, delivery playbooks, and best practices. Mentor consultants and