Principal Network Engineer – Global Infrastructure & Cyber Resilience

Commvault • Tinton Falls, NJ

8h • Remote

About The Position

As a Principal Network Engineer at Commvault, you will not just sit in an ivory tower drawing diagrams. We are looking for a Player-Coach—a technical heavyweight who possesses the vision to architect a global network and the grit to build and troubleshoot it personally. This role is defined by Deep Execution. You will own the full lifecycle of our global connectivity fabric, from the initial whiteboarding of a Zero Trust framework to the hands-on configuration of the solution and the resolution of complex multi-cloud routing issues. If you are a high-level architect who has moved away from the CLI, this is not the role for you; we need a leader who stays "close to the packets" while guiding our long-term technical strategy.

Requirements

• 12+ years in Network Engineering, with a career path that proves you have never lost your "hands-on" edge.
• Proven ability to build, operate, and troubleshoot complex environments across Palo Alto (PCNSE level), GCP, and Azure.
• Direct experience deploying Palo Alto Prisma SD-WAN and implementing ZTNA frameworks in a global enterprise.
• Expert-level mastery of BGP, EVPN/VXLAN, and stateful firewalling.
• High proficiency in Python or Terraform for infrastructure deployment.
• The ability to command a room of executives while being the most technical person on a bridge call.
• Exceptional written and verbal skills. You can explain the "why" behind a $2M infrastructure investment to a Board of Directors just as easily as you can debug a packet drop with an engineer.

Nice To Haves

• Palo Alto: PCNSE or PCCSE.
• Cloud: Google Professional Cloud Network Engineer or Azure Network Engineer Associate (AZ-700).
• General: CCIE (Route/Switch or Security) is highly valued but not required if equivalent experience is demonstrated.

Responsibilities

• Build & Deploy: Take primary responsibility for the "First Build." You will lead the hands-on implementation of global SD-WAN and Cloud nodes, ensuring the transition from design to production is flawless.
• Deep-Dive Troubleshooting: Act as the ultimate technical escalation point. When Tier-3 hits a wall, you dive into the logs, PCAPs, and routing tables to identify and fix the root cause.
• Network-as-Code: Personally develop and maintain Terraform and Ansible playbooks to automate the global environment, ensuring you are driving the execution of automation, not just suggesting it.
• GCP & Azure Execution: Physically build and manage the transit gateways, VPC/VNet peering, and Cloud Interconnects that power our multi-cloud ecosystem.
• SD-WAN Mastery: Take the lead in configuring Prisma Access and NGFWs. You will own the policy engine, hands-on, ensuring security is baked into every route and interface.
• Zero Trust Integration: Move beyond the "Zero Trust" buzzword by executing the actual micro-segmentation and identity-based access controls across our hybrid footprint.
• Palo Alto / zScaler Expert: Act as the Subject Matter Expert (SME) for Next-Generation Firewalls (NGFW), Prisma Access and ZTNA Own the global policy sets, SSL decryption strategies, and threat prevention profiles.
• Hybrid Connectivity: Manage complex Site-to-Site VPNs, GRE tunnels, and high-speed interconnects that link our global data centers with public cloud regions.
• Strategic Influence: Partner with the CISO and Director of Infrastructure to align networking goals with broader business initiatives.
• Technical Mentorship: Lead and upskill a global team of senior and mid-level engineers. Conduct architectural reviews and set the "gold standard" for documentation and code-based infrastructure.
• Vendor Management: Lead technical evaluations and QBRs with key partners (Google, Microsoft, Palo Alto), ensuring Commvault is leveraging the latest features and optimal pricing.
• Lead by Example: Set the technical standard for the engineering team by demonstrating best practices in configuration, documentation, and operational discipline.
• Executive Communication: Translate complex technical "war stories" and execution hurdles into concise executive summaries for leadership, providing clear paths for risk mitigation.
• Infrastructure as Code (IaC): Champion a "Network-as-Code" mindset using Terraform, Ansible, or Python to automate repetitive tasks and ensure 100% configuration consistency.
• Operational Resilience: Own Tier-4 escalations for complex network outages. Lead Root Cause Analysis (RCA) sessions that translate technical failures into actionable business improvements.

Benefits

• Continuous professional development, product training, and career pathing
• An inclusive company culture, opportunity to join our Employee Groups
• Generous benefits supporting your health, financial security, and work-life balance
• Employee stock purchase plan (ESPP)

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed