Staff Engineer (Infrastructure Networking)

Job Description

We are seeking a Staff Palo Alto Network Engineer to help mature and optimize our global network security environment with a focus on Zero Trust architecture, alignment to NIST cybersecurity frameworks, and proactive risk reduction. This role is critical to ensuring that our firewall infrastructure and security posture evolve in step with business priorities, regulatory compliance, and industry best practices.

The ideal candidate brings deep experience in managing and refining Palo Alto Networks solutions across complex, hybrid enterprise environments. Beyond deployment, this position requires a strategic mindset-someone who can evaluate current controls, identify gaps, drive standardization, and lead continuous improvement efforts.

Primary Responsibilities and Duties - This role will be focused on these key functions :

• Serve as the subject matter expert for Palo Alto Networks firewalls, Panorama, and Prisma Access, ensuring ongoing performance, scalability, and consistency
  
• Drive maturity of network security architecture, focusing on Zero Trust Network Architecture (ZTNA) and alignment to the NIST Cybersecurity Framework (CSF) and 800-207 guidelines
  
• Lead ongoing optimization of firewall policies, rulebase hygiene, and configuration standards across environments
  
• Define and enforce enterprise-wide security policy frameworks, including tagging standards, object naming conventions, and access control methodologies
  
• Refine and maintain authentication profile integrations (e.g., LDAP, SAML, RADIUS, MFA) to support granular, identity-based security models
  
• Collaborate with stakeholders to align firewall controls and network segmentation to business risks and priorities
  
• Conduct periodic assessments and gap analyses to measure posture against best practices, compliance requirements, and internal audit standards
  
• Participate in cross-functional projects to ensure network security is embedded in infrastructure lifecycle processes (e.g., change management, architecture reviews)

• 5-8+ years of experience managing enterprise firewall environments, ideally in regulated or highly available environment
  
• Expertise with Palo Alto Networks solutions (PA Series firewalls, Panorama, Prisma Access)
  
• Deep understanding of Zero Trust principles and ability to apply them in real-world enterprise environments
  
• Strong grasp of NIST CSF, 800-207, and other industry-aligned security architecture and control frameworks
  
• Experience developing and managing firewall policy baselines, segmentation strategies, and governance documentation
  
• Proficiency in managing authentication profiles and integrating identity platforms (e.g., Okta, Azure AD) with network controls
  
• Experience in hybrid cloud and IaaS environments (e.g., AWS, Azure) and their impact on network security architecture
  
  

• PCNSE (Palo Alto Networks Certified Network Security Engineer) - Required
  
• CCNP Security, CCNP Enterprise, or CCIE - Preferred
  
• Security certifications such as CISSP, Security+, or GIAC - Strongly Preferred
  

• Familiarity with Cisco networking technologies (routing/switching, ISE) is preferred
  
• Leading security hardening or firewall optimization initiatives
  
• Developing internal standards aligned to Zero Trust maturity models
  
• Automation and scripting experience (e.g., Ansible, Python, Terraform) is a plus
  
• Exposure to SD-WAN or SASE frameworks
  
• Education: Bachelors degree in Computer Science, Information Technology, Cybersecurity, or related field.
  

• Hybrid and remote work opportunities for certain roles
• 401 (k) with employer match
• Medical, dental, and vision with HSA and FSA options
• Competitive vacation and sick time off, as well as dedicated volunteer days
• Access to wellness support through Employee Assistance Program, physical and mental health wellness programs
• Up to $5,250 paid back to you on eligible education expenses
• Pet care discounts for your furry family members
• Financial support in times of hardship with our Achieve Care Fund
• A safe place to connect and a commitment to diversity and inclusion through our six employee resource groups