Principal Site Reliability Engineer- Network & Security Operations

Palo Alto Networks

1d•Onsite

About The Position

As a Principal Site Reliability Engineer, you will be responsible for Palo Alto Networks’ network and security infrastructure for all enterprise, partner, and customer facing services. We are looking for an analytical, agile, and influential leader who can quickly deliver meaningful results in a fast-paced environment. You will work with a team of senior level IaC Automation Engineers leading projects designing, implementing, and maintaining our global compute infrastructure.

Requirements

8+ years of experience in IAC and infra automation tools, using Terraform & Ansible, CI/CD tools
Expert knowledge on cloud orchestration via GKE / EKS, etc, preferably on GCP
Experienced in designing and implementing Business Continuity Plans and Disaster Recovery Plans
Expert knowledge of firewall technologies (PANW preferred), including VPNs and routing
Advanced knowledge of shell scripting and programming languages such a PERL, Ruby, PHP, or Python
Advanced knowledge of DNS and DHCP, and Microsoft AD infrastructure
Strong analytical skills for interpreting business requirements and translating them into technical specifications
Strong project management, time management, and organizational skills
Excellent communication skills, including the ability to write network and security documentation, policies, and guidelines
Ability to work nights and weekends and provide 24/7 on-call support

Nice To Haves

BSCS or related field, MS preferred, or equivalent military experience required
Extensive background in planning and designing projects, and analyzing existing distributed systems and procedures for efficiency and effectiveness
Experience with Load Balancers, HAProxy, F5, nginx
Knowledge of data center design, build-out, and best practices
Knowledge of virtualization platforms, preferably Openshift
Experience with multi-tier architectures, including best practices around tier isolation (for databases, etc.)
Extensive knowledge of network security systems, intrusion detection systems, and protocols, including ACE, ACS, VPN, GRE, IPSEC, IKE, TACACS, RADIUS, ACLs, 802.1x, audits, log files, etc.
Well-versed in commercial InfoSec requirements, guidance, and standards

Responsibilities

Design, implement and provide support for IT infrastructure compute components
Install, support and maintain software infrastructure according to best practices, including routers, Load balancers, switches, wifi controllers, and firewalls via terraform/ansible automation
Perform network security design and integration
Diagnose problems and solve issues, often under time constraints
Implement the necessary controls and procedures to protect information systems assets from intentional or inadvertent modification, disclosure, or destruction
Ensure system uptime and backup for all IT infrastructure
Provide security incident triage and response, including working with firewall and device logs, investigating security events, protecting forensic value of data and establishing monitoring and incident reporting and response procedures
Work closely with engineering to help report issues and manage project deliverables and provide status and progress reports
Provide on-call support for Incident Management