> Markdown version of [/jobs/ext/2383339-practice-architect-delivery-architecture-coe](https://www.wearedevelopers.com/jobs/ext/2383339-practice-architect-delivery-architecture-coe). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Practice Architect, Delivery Architecture (COE)

- **Company:** Palo Alto Networks
- **Location:** Arlington, VA, United States
- **Salary:** $163,000.0 - $224,500.0
- **Contract:** Permanent contract
- **Skills:** ARM Architecture, Cloud Computing, Cyber Security, Intrusion Detection and Prevention, Network Security, Security Information and Event Management, Systems Integration, Data Ingestion, Palo Alto Networks, Cortex XSOAR Platform, Prisma Cloud Platform
- **Published:** August 16, 2026
- **Apply:** https://www.educationjobsite.com/job.asp?id=3355965592&tx=DT10596UYT&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

* Proven track record of successfully delivering multiple end-to-end Cortex XSIAM projects in complex customer environments.
 * Hands-on experience working in or closely with modern SOC environments, with a strong understanding of SIEM/SOAR transformations, threat detection, incident response workflows, and data ingestion architectures.
 * Expertise across the Palo Alto Networks Cortex portfolio (XSIAM, XDR, XSOAR, XPANSE); familiarity with Prisma Cloud/Network Security is a plus.
 * Significant background in Professional Services, Technical Consulting, or Systems Integration delivering large-scale enterprise cybersecurity solutions.
 * Ability to identify execution gaps in real time and engineer practical, scalable solutions.
 * Demonstrated ability to influence, communicate, and collaborate across technical teams, product managers, and executive stakeholders.

## Description

We are seeking a Practice Architect, Delivery Architecture with deep technical expertise in Cortex XSIAM and a strong Security Operations Center (SOC) background to join our Center of Excellence (COE).

As a hands-on technical leader, you will bridge the gap between architectural design and real-world field execution. You will participate directly in complex customer deployments, validate delivery methodologies in live environments, and identify and remove friction points to ensure our services are repeatable, scalable, and optimized for customer outcomes.

Operating at the intersection of Professional Services, Scale & Optimize (S&O), and the COE, you will bring field execution insights back into our delivery architecture, helping ensure our methodologies and frameworks are not only technically sound, but proven in practice., Field Execution & XSIAM Delivery Validation

 * Hands-on Deployment: Actively participate in customer deployments to test and validate COE delivery frameworks, playbooks, and tools in live customer environments.
 * Technical Escalation: Serve as the senior technical authority and escalation point for complex, high-risk, or large-scale Cortex XSIAM deployments.
 * Execution Alignment: Ensure delivery patterns are practical, efficient, and tailored to the operational realities of modern enterprise SOCs.

Delivery Architecture & Execution Design

 * Architectural Standards: Define, refine, and standardize delivery architecture patterns to ensure consistent execution across products, regions, and delivery models.
 * Deployment Sequencing: Establish best practices for implementation dependencies, integration points, and sequencing across Cortex (XSIAM, XDR, XSOAR, XPANSE), Cloud, and Network Security platforms.
 * Operational Bridge: Ensure solution architectures seamlessly translate into day-to-day operational success for customer SOC teams.

Lifecycle Validation & Continuous Improvement

 * End-to-End Delivery: Oversee the deployment lifecycle from initial kickoff through optimization, ensuring smooth handoffs between Professional Services and Scale & Optimize teams.
 * Friction Reduction: Identify where deployments stall, diagnose execution gaps, and feed structured, actionable feedback back into COE frameworks and engineering teams.
 * Pilot Rollouts: Lead and validate pilots for new delivery models, tooling, and automation prior to global rollout.

Collaboration & Enablement

 * Cross-Functional Alignment: Partner with Professional Services, S&O, Product/Engineering, and Regional Leadership to align global COE standards with regional field needs.
 * Mentorship & Playbooks: Contribute to field enablement by authoring runbooks, delivery playbooks, and best practices. Mentor consultants and architects on advanced execution strategies.


## Related Videos

- [We adopted DevOps and are Cloud-native, Now What?](https://www.wearedevelopers.com/videos/485-we-adopted-devops-and-are-cloud-native-now-what)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [When React Meets Reality: Building a Real-Time Control Room for Autonomous Vehicles](https://www.wearedevelopers.com/videos/2091-when-react-meets-reality-building-a-real-time-control-room-for-autonomous-vehicles)
- [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing)
- [Unleashing the Full Potential of the Arm Architecture – Write Once, Deploy Anywhere](https://www.wearedevelopers.com/videos/940-unleashing-the-full-potential-of-the-arm-architecture-write-once-deploy-anywhere)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j)
- [Stephan Gillich - Bringing AI Everywhere](https://www.wearedevelopers.com/magazine/489-stephan-gillich-bringing-ai-everywhere)
- [What Makes WeAreDevelopers World Congress Different From Every Other Tech Event?](https://www.wearedevelopers.com/magazine/701-what-makes-wearedevelopers-world-congress-different-from-every-other-tech-event)
- [Why Event-Driven Architecture Isn’t About Speed (and When You Actually Need It)](https://www.wearedevelopers.com/magazine/745-why-event-driven-architecture-isn-t-about-speed-and-when-you-actually-need-it)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)