Senior Product Manager, Web Proxy & Secure Web Gateway (SWG) (hybrid) Santa Clara, California, United States

About this role

Senior Product Manager, Web Proxy & Secure Web Gateway (SWG) (hybrid)

Santa Clara, California, United States of America Product Engineering Ref ID: JR-024366

Apply

Current Employees, apply here

Our Mission

At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place.

Who We Are

In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us!

We believe collaboration thrives in person. That’s why most of our teams work from the office full time, with flexibility when it’s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes.

Job Summary

Palo Alto Networks is seeking a Senior Product Manager, Web Proxy & Secure Web Gateway (SWG) to lead product strategy, roadmap development, and customer adoption for enterprise web proxy capabilities within our Next-Generation Firewall (NGFW) platform.

You will define how organizations modernize and consolidate legacy forward proxy and Secure Web Gateway architectures using PAN-OS, Panorama, and Strata Cloud Manager (SCM).

This role combines deep network security knowledge with customer-focused product management. You will work closely with engineering, UX, technical marketing, and field teams to deliver secure, scalable, and intuitive proxy solutions across physical firewalls and VM-Series deployments.

Your work will span explicit and transparent proxy architectures, HTTP/HTTPS traffic inspection, TLS decryption, identity-based authentication, routing, and centralized security policy management.

Your Impact

• Own Product Strategy and Roadmap: Define and execute a 12–18 month roadmap for enterprise Web Proxy and Secure Web Gateway capabilities on Palo Alto Networks NGFW platforms, aligned with customer requirements, security outcomes, and business priorities.
• Lead Legacy Proxy Modernization: Drive the end-to-end customer migration experience from traditional web proxy and SWG environments to consolidated NGFW-based architectures managed through PAN-OS, Panorama, and Strata Cloud Manager.
• Define Proxy Architecture and Workflows: Translate customer and technical requirements into product capabilities for explicit proxy, transparent proxy, forward proxy, HTTP/HTTPS traffic handling, loopback interfaces, Destination NAT (DNAT), and upstream traffic steering.
• Advance Web Security and TLS Inspection: Partner with engineering to improve HTTPS inspection, TLS decryption, CONNECT and Server Name Indication (SNI) validation, domain fronting prevention, DNS Security integration, and advanced threat prevention.
• Improve Identity-Based Access: Define authentication and user identity experiences using technologies such as Kerberos, SAML 2.0, and Palo Alto Networks Cloud Identity Engine.
• Simplify Configuration and Management: Own customer workflows across command-line interfaces (CLI), REST APIs, and graphical user interfaces (GUI), improving deployment, policy configuration, troubleshooting, and operational visibility.
• Translate Customer Needs into Product Requirements: Conduct customer discovery, analyze migration barriers, define product requirements documents (PRDs), establish acceptance criteria, and prioritize capabilities based on customer value, technical feasibility, and business impact.
• Drive Cross-Functional Product Delivery: Collaborate with engineering, UX/design, technical marketing, sales engineering, and go-to-market teams to launch features, support strategic customer opportunities, and accelerate product adoption.
• Measure Product Outcomes: Establish and monitor product adoption, migration success, configuration efficiency, deployment readiness, and troubleshooting metrics, including mean time to resolution (MTTR).
• Apply AI to Product Management: Use generative AI, large language models (LLMs), analytics, and rapid prototyping tools to improve product discovery, requirements development, customer insight analysis, and product delivery while maintaining accuracy and responsible use.

Qualifications

Required Qualifications

• 5+ years of experience in product management, technical product management, technical marketing, or engineering leadership, including experience defining requirements or delivering enterprise networking or network security products.
• 3+ years of relevant experience with web proxy, forward proxy, Secure Web Gateway (SWG), next-generation firewall (NGFW), or closely related network security technologies.
• Strong understanding of enterprise networking and web traffic flows, including HTTP/HTTPS, TCP/IP, TLS/SSL, proxy deployment models, and network address translation (NAT).
• Working knowledge of explicit proxy and transparent proxy architectures, including configuration, deployment considerations, and enterprise security use cases.
• Experience translating technical networking or security requirements into product roadmaps, PRDs, user stories, and engineering deliverables.
• Demonstrated ability to partner with software engineering teams on architecture, technical trade-offs, feature prioritization, and product execution.
• Experience conducting customer discovery, evaluating product adoption challenges, and using customer feedback and data to prioritize product improvements.
• Strong communication, stakeholder management, and cross-functional collaboration skills.

Preferred Qualifications

• Experience with Secure Web Gateway products, legacy web proxy modernization, proxy consolidation, or migration from enterprise proxy platforms.
• Familiarity with TLS inspection, SSL decryption, proxy auto-configuration (PAC) files, CONNECT methods, SNI validation, DNS Security, and domain fronting prevention.
• Knowledge of identity and authentication technologies, including Kerberos, SAML 2.0, and cloud identity integrations.
• Experience with PAN-OS, Panorama, Strata Cloud Manager, Palo Alto Networks NGFWs, or comparable enterprise firewall and security management platforms.
• Familiarity with CLI, REST APIs, GUI-based configuration, policy management, and network troubleshooting workflows.
• Understanding of Zero Trust Network Access (ZTNA), Secure Access Service Edge (SASE), Security Service Edge (SSE), or cloud-delivered security architectures.
• Experience using AI-assisted product management tools, generative AI, LLMs, analytics, or rapid prototyping to improve product development workflows.
• Bachelor's or Master's degree in Computer Science, Electrical Engineering, or a related technical field, or equivalent practical experience.

Compensation Disclosure

The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/com-missioned roles) is expected to be the annual range listed below. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found here.

$153,000.00 - $247,500.00/yr

Our Commitment

We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together.

We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at [email removed].

Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.

All your information will be kept confidential according to EEO guidelines.

Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.