Principal Palo Alto Networks SME
About The Position
The NGG program is seeking a Principal-level Palo Alto Networks Subject Matter Expert to lead the design, deployment, and optimization of advanced network security architectures. The role provides senior-level technical leadership across firewall engineering, network segmentation, threat prevention, and Zero Trust integration. The ideal candidate has deep, hands-on expertise with Palo Alto Networks platforms and can drive enterprise-scale solutions from strategy through implementation. The position involves leading firewall architecture and engineering, designing and deploying security policies, optimizing Panorama for centralized management and scale, supporting migrations to Palo Alto platforms, and advising program leadership. The role also produces technical designs and implementation documentation, performs advanced troubleshooting, collaborates with cross-functional teams, and mentors junior engineers. This is a remote role with a 40-hour scheduled work week and 25–50% travel. The position requires U.S. citizenship and a Secret security clearance. The likely salary range is $153,000–$207,000, with actual compensation dependent on experience, geographic location, and contractual requirements.
Requirements
- BA/BS degree or equivalent.
- 10 or more years of related experience, including 10 or more years in network security engineering.
- At least 5 years of hands-on Palo Alto Networks experience.
- Deep expertise in Panorama, virtual and hardware firewalls, GlobalProtect, Threat Prevention, URL Filtering, and WildFire.
- Proven experience architecting large-scale, mission-critical firewall infrastructures.
- Strong understanding of routing, VLANs, IPSec VPN, BGP/OSPF, and network segmentation.
- Experience with Zero Trust frameworks and micro-segmentation strategies.
- Ability to create detailed engineering documentation and lead complex deployments.
- Strong communication skills, including the ability to brief leadership and stakeholders.
- Must currently possess a Secret security clearance and be able to obtain a Secret clearance.
- U.S. citizenship required.
Nice To Haves
- Hands-on Palo Alto WildFire experience, including deployment, configuration, policy integration, and operational troubleshooting in enterprise environments.
- PCNSE or higher certification, such as PCSNE or PSE.
- Experience with automation frameworks such as Terraform, Ansible, or PanOS APIs.
- Background supporting federal or regulated environments.
- Experience integrating Palo Alto with SIEM, SOAR, and identity platforms.
Responsibilities
- Lead architecture, engineering, and configuration of Palo Alto firewalls across NGG environments.
- Design and deploy security policies, NAT, App-ID, User-ID, and threat profiles.
- Architect and optimize Panorama for centralized management, multi-tenant configurations, and scale.
- Implement Zero Trust segmentation aligned with NGG security requirements.
- Support migration from legacy security stacks to Palo Alto platforms.
- Develop high-quality design artifacts, including HLDs, LLDs, diagrams, runbooks, and implementation plans.
- Conduct advanced troubleshooting, packet analysis, and platform tuning.
- Advise program leadership on best practices, risks, and roadmap recommendations.
- Collaborate with network, cloud, cyber, and operations engineering teams.
- Mentor junior engineers and serve as an authoritative technical decision maker.
- Deliver architecture designs, implementation plans, technical documentation, configured firewalls, Panorama templates, policy baselines, migration plans, cutover support, and ongoing engineering support.
Benefits
- 401(k) plan with company match.
- Medical plan options, including options with Health Savings Accounts.
- Dental and vision plan options.
- Paid vacation, sick and personal time, and holidays.
- Paid parental leave, including up to 160 hours in a rolling 12-month period for eligible employees.
- Disability, life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance.
- Professional growth opportunities, internal mobility, paid education, and certifications.
- Full-flex work weeks where possible and eligible.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Principal
