Staff Network Engineer

Procore Technologies•Austin, TX

9d•$127,680 - $175,560•Onsite

About The Position

Procore Technologies is seeking a Staff Network Engineer to serve as the technical lead for its corporate network across on-premises and cloud environments. As part of the IT Infrastructure team, this role works closely with Security, Cloud/Platform Engineering, IT leadership, and external partners to establish reference architectures, advance the Zero Trust/SASE strategy, and develop scalable network automation. Success requires strengths in enterprise network architecture, Zero Trust/SASE platforms such as Zscaler ZIA/ZPA, and cloud networking infrastructure. The position is based in Procore’s Carpinteria, California office and reports to the Manager of Network Engineering. The Staff Network Engineer owns the long-term technical direction, multi-year roadmap, and reference architecture for the global network spanning corporate offices, data centers, and multi-cloud IaaS environments. The role leads the evolution and operational maturity of the enterprise SASE/SSE platform, integrates access controls with identity, device posture, and logging systems, and advances infrastructure-as-code and automation. It also serves as the principal escalation authority for critical network incidents, mentors network engineers, and conducts vendor and technology evaluations.

Requirements

Extensive enterprise network engineering experience designing, deploying, and operating highly available routing, including BGP and OSPF, switching, SD-WAN, and hybrid cloud network topologies.
Hands-on production expertise architecting and administering enterprise-scale SASE/ZTNA platforms, with deep knowledge of Zscaler ZIA and ZPA or comparable platforms such as Palo Alto Prisma Access, Netskope, or Cloudflare One.
Strong technical background in multi-cloud networking (AWS and/or Azure/GCP), including transit gateway design, VPC/VNet peering, direct interconnects, and hybrid cloud connectivity.
Demonstrated capability with network automation and infrastructure-as-code tools such as Python, Ansible, and Terraform.
In-depth understanding of enterprise security engineering, including next-generation firewalls, TLS/SSL inspection, PKI/cryptography in transit, microsegmentation, and zero-trust policies.
Strong cross-functional leadership and communication skills, with a track record of driving consensus on complex technical architectures across IT, Engineering, and Security teams.
Bachelor's degree in Computer Science, Management Information Systems, or a related technical field, or equivalent practical work experience.

Nice To Haves

Advanced industry certifications such as CCIE/CCNP, ZDTA/ZDTE, or Cloud Network Specialties.
Background as an Enterprise Network Architect or Principal Network Engineer specializing in global SASE/Zero Trust migrations.
Background as a Cloud Network Infrastructure Engineer bridging enterprise data centers with AWS/Azure hybrid environments.
Background as a Network Security Engineer with production experience scaling Zscaler (ZIA/ZPA) and identity-aware proxy architectures.
Background as a Network Automation Engineer with deep expertise in Python, Terraform, and automated configuration compliance.

Responsibilities

Own the long-term technical direction, multi-year roadmap, and reference architecture for the global network across corporate offices, data centers, and multi-cloud IaaS environments.
Lead the architectural evolution and operational maturity of the enterprise SASE/SSE platform, including Zscaler ZIA and ZPA, transitioning legacy perimeter access to a least-privilege Zero Trust Network Access model.
Partner with Identity, InfoSec, and Platform teams to integrate network access controls with identity providers using SAML/SCIM, device posture validation, and SIEM logging pipelines.
Drive network automation and infrastructure-as-code initiatives, creating scalable tooling to reduce operational toil and enforce consistent configuration standards across global environments.
Serve as the principal escalation authority for critical network incidents, direct root-cause investigations, and implement durable architectural remediations.
Mentor network engineering team members through technical design reviews and knowledge sharing, and establish operational standards.
Conduct vendor evaluations and technology assessments, providing build-versus-buy recommendations aligned with enterprise compliance, capacity, and performance requirements.