Senior Network Security Engineer

Applied Materials • Santa Clara, CA

6d • $152,000 - $208,500

About The Position

Applied Materials is seeking a Senior Network Security Engineer to design, implement, secure, operate, and continuously improve global enterprise network security infrastructure. This hands-on technical leadership role focuses primarily on Palo Alto Networks firewall architecture, engineering, policy governance, lifecycle management, troubleshooting, automation, and security posture optimization. The infrastructure spans data centers, manufacturing and OT environments, R&D, campuses, and cloud environments, with supporting expertise in Fortinet, SSE/SASE, Zero Trust, cloud security, routing, and security automation.

The role partners with cybersecurity, cloud, network, OT, application, and infrastructure teams to deliver secure, resilient, scalable, and standardized network security services. It provides technical leadership to engineers and cross-functional teams, leads complex global projects, and establishes architectures and standards that affect the security, availability, resiliency, and performance of business-critical services. The position is full-time, based in Santa Clara, California, and requires travel 10% of the time. Relocation is not available.

Requirements

• At least 8 years of enterprise Network Security Engineering experience; the education and experience section specifies 8–12 years of relevant network and network security engineering experience.
• At least 5 years of hands-on Palo Alto Networks experience in architecture, deployment, engineering, or advanced operations.
• Expert knowledge of PAN-OS, Panorama, App-ID, User-ID, NAT, SSL decryption, Security Profiles, Threat Prevention, VPN, and security-policy management.
• Strong experience with enterprise firewall architecture, policy governance, and lifecycle management.
• Expert knowledge of TCP/IP, BGP, OSPF, routing, VPN, and network segmentation.
• Advanced firewall troubleshooting and packet-analysis capabilities.
• Experience designing secure, highly available network architectures.
• Experience with enterprise cloud and hybrid-cloud environments.
• Experience leading complex infrastructure or security projects.
• Strong analytical, documentation, communication, and stakeholder-management skills.
• Bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or a related field is required.
• Ability to solve complex Layer 3 through Layer 7 network security problems and provide technical leadership.
• Highly preferred certifications: Palo Alto Networks PCNSE and CISSP.

Nice To Haves

• Experience with Fortinet FortiGate, FortiManager, and FortiAnalyzer.
• Experience with Strata Cloud Manager, Palo Alto AIOps/BPA, Skybox, or Tufin.
• Experience deploying firewalls in Azure, AWS, and/or GCP.
• Experience with Prisma Access and/or Zscaler ZIA/ZPA.
• Experience with SIEM/XDR/SOAR integrations.
• Experience with OT/manufacturing network security and segmentation.
• Experience within large-scale, globally distributed enterprise environments.
• Preferred or plus certifications: CCNP Security or CCIE Security; Fortinet, Zscaler, Microsoft Azure networking/security, or AWS Advanced Networking/Security certifications.

Responsibilities

• Design, implement, and support global Palo Alto Networks firewall infrastructure, including PA-Series, VM-Series, Panorama, and Strata Cloud Manager.
• Design resilient firewall architectures across data center, campus, manufacturing, OT, R&D, and cloud environments; define reference architectures, configuration standards, security baselines, and deployment patterns.
• Engineer high availability, routing, NAT, VPN, segmentation, policy-based forwarding, ECMP, VSYS, virtual routing, and multi-tenancy architectures; define Panorama device-group, template, and template-stack architectures; support Fortinet infrastructure where required.
• Architect and govern enterprise firewall rules, policy hierarchy, objects, naming standards, and policy lifecycle processes.
• Optimize firewall rule bases and migrate port-based policies to application- and identity-based policies; reduce unused, duplicate, shadowed, overly permissive, and high-risk rules.
• Design and implement App-ID, User-ID, Device-ID, Security Profiles, SSL/TLS decryption, IPS, Advanced Threat Prevention, DNS Security, URL Filtering, and WildFire controls.
• Establish firewall policy recertification, ownership, change-control, and compliance processes; perform configuration and security posture reviews using relevant tools and benchmarks.
• Own PAN-OS and FortiOS lifecycle management, including upgrades, hardware refresh, vulnerability remediation, capacity planning, and performance optimization.
• Troubleshoot firewall, routing, NAT, VPN, decryption, application, and connectivity issues; perform packet captures, session analysis, flow diagnostics, and root-cause analysis; serve as a senior escalation point for critical incidents and outages.
• Develop operational standards, runbooks, health checks, KPIs, and engineering documentation.
• Design and support SSE/SASE architectures using Prisma Access and Zscaler ZIA/ZPA; engineer SWG, CASB, ZTNA, DLP, Remote Browser Isolation, private application access, and cloud-delivered security controls.
• Support secure remote access for employees, contractors, and third parties using identity, device posture, and Zero Trust principles; integrate platforms with identity and endpoint services and support modernization of legacy VPN architectures where appropriate.
• Architect and operate network security across Azure, AWS, and GCP, including Palo Alto VM-Series and Cloud NGFW deployments and secure hybrid-cloud traffic architectures.
• Implement network segmentation and Zero Trust controls across on-premises and cloud environments; partner with cloud teams to integrate firewall services with routing, security groups, load balancers, DNS, and identity services.
• Integrate firewall telemetry with SIEM/XDR/SOAR platforms; engineer logging and telemetry, support investigations and incident response, and develop monitoring, dashboards, alerts, and operational security metrics.
• Lead global initiatives such as firewall modernization, segmentation, data center migrations, cloud security transformation, SSE/SASE adoption, and Zero Trust programs.
• Develop high- and low-level designs, implementation, test, migration and rollback plans, and operational runbooks; lead projects from architecture through implementation and operational handoff.
• Evaluate technologies, lead proofs of concept, recommend platforms, mentor engineers, establish engineering best practices, and present architecture, risks, project status, and recommendations to leadership.
• Align firewall and network security controls with corporate requirements and frameworks including NIST CSF, ISO 27001, CIS Controls, and applicable export-control requirements.
• Lead firewall recertification, configuration audits, security assessments, and vulnerability remediation; document network security risks and drive remediation; maintain auditable standards, baselines, and control documentation.

Benefits

• Comprehensive benefits package.
• Potential eligibility for bonus compensation and a stock award program, as applicable.
• Programs and support focused on employee health and wellbeing and personal and professional growth.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior