Domain Consultant – Next-Gen Trust Security

Palo Alto Networks

. Lead Proof of Value (PoV) engagements and technical validations for Next-Gen Trust Security .

Posted 11/12/2026full-timeRemote • SwitzerlandMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Certificate Lifecycle Management (CLM), Public Key Infrastructure (PKI), and cryptographic governance, with a strong ability to communicate complex security concepts to stakeholders. Proven track record in driving adoption of security solutions and collaborating with cross-functional teams to enhance customer security outcomes.

Highest-signal resume keywords

Certificate Lifecycle Management (CLM)Public Key Infrastructure (PKI)Cloud-Native Connectors (Azure, GCP, AWS)DevOps Tools (Terraform, Git, Kubernetes, Ansible)Bilingual Proficiency in German

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Certificate Lifecycle ManagementPublic Key InfrastructureSymmetric and Asymmetric EncryptionTLS/SSL ProtocolsPost-Quantum CryptographyAutomated Provisioning (ACME, SCEP)Network Security ArchitecturesCryptographic StandardsKey ManagementSecure Communication Protocols

Soft Skills

Creative Problem-SolvingExcellent Written Communication

Tools & Technologies

Strata Cloud ManagerNetwork-Native Discovery ToolsHardware Security AppliancesVirtual Security AppliancesContainer Technologies (Docker)

Certifications & Qualifications

CISSPInformation Security Certifications

Industry Keywords

CybersecuritySales EngineeringTechnical ValidationTrust SecurityCertificate Operations

Tech Stack

Tools & technologies

AnsibleAWSAzureCloudCyber SecurityDockerGoogle Cloud PlatformKubernetesTerraform

About the role

Key responsibilities & impact

Lead Proof of Value (PoV) engagements and technical validations for Next-Gen Trust Security
Design unified cryptographic governance models within Strata Cloud Manager aligned with certificate operations and network enforcement
Identify critical projects and actions needed to achieve customers’ desired security end-state
Eliminate sales obstacles through creative and adaptive problem-solving
Educate CISOs and VP-level stakeholders on 47-day certificate lifecycles and Post-Quantum Cryptography
Provide customer usage-pattern feedback to product teams to improve NGTS/MIM adoption
Conduct deep-dive discovery sessions to uncover unmanaged or rogue certificates using network-native discovery tools
Partner with Solutions Consultants, Account Managers, and the CyberArk MIM Specialist team on account-based pursuit strategies
Drive adoption of Secure Flex credits by demonstrating consolidation of CLM/PKI tools into a centralized control plane
Serve as the technical bridge between Network Security teams and Identity stakeholders

Requirements

What you’ll need

5+ years of Sales Engineering or Consulting experience with a proven track record in a cybersecurity software vendor
Extensive experience in Certificate Lifecycle Management (CLM), PKI architecture (ZTPKI, Microsoft ADCS), and SSL/TLS protocols
Experience with automated provisioning (ACME, SCEP)
Experience with cloud-native connectors (Azure, GCP, AWS)
Experience with hardware/virtual security appliances
Hands-on experience with DevOps tools (Terraform, Git, Kubernetes, Ansible) and container technologies (Docker) is a significant benefit
Strong understanding of NGFW, SASE, and GlobalProtect architectures, particularly decryption, inspection, and certificate-based authentication
Proven ability to simplify complex cryptographic concepts into business-value outcomes
Excellent written communication skills
Bilingual proficiency in German is a requirement
Comprehensive knowledge of Public Key Infrastructure, including certificate authorities, lifecycle management, and trust models
Deep understanding of symmetric and asymmetric encryption, key management, and cryptographic standards
Mastery of TLS/SSL handshakes, S/MIME, and secure communication protocols
Familiarity with Post-Quantum Cryptography (PQC) and migration strategies for quantum-safe algorithms
CISSP or equivalent Information Security certifications are preferred
No immigration sponsorship; applicants must not require work visa sponsorship for this position

Benefits

Comp & perks

Reasonable accommodations for qualified individuals with a disability or special need
Equal opportunity employment
Confidential handling of applicant information according to EEO guidelines