Staff Network Engineer

Procore Technologies•Austin, TX

8d•Onsite

About The Position

Procore Technologies is seeking a Staff Network Engineer to serve as the technical lead for its corporate network across on-premises and cloud environments. As part of the IT Infrastructure team, this role works closely with Security, Cloud/Platform Engineering, IT leadership, and external partners to establish reference architectures, advance the Zero Trust/SASE strategy, and build scalable network automation. The role is based in Procore’s Carpinteria, California office and reports to the Manager of Network Engineering. The engineer will set the long-term technical direction for Procore’s global network, lead the evolution and operation of its SASE/SSE platform, and advance network automation and infrastructure-as-code. The role also serves as the principal escalation authority for critical network incidents, mentors network engineering colleagues, and evaluates vendors and technologies.

Requirements

Extensive enterprise network engineering experience designing, deploying, and operating highly available routing, including BGP and OSPF, switching, SD-WAN, and hybrid cloud network topologies.
Hands-on production expertise architecting and administering enterprise-scale SASE/ZTNA platforms, with deep knowledge of Zscaler ZIA and ZPA or comparable platforms such as Palo Alto Prisma Access, Netskope, or Cloudflare One.
Strong technical background in multi-cloud networking (AWS and/or Azure/GCP), including transit gateway design, VPC/VNet peering, direct interconnects, and hybrid cloud connectivity.
Demonstrated capability with network automation and infrastructure-as-code tools such as Python, Ansible, and Terraform.
In-depth understanding of enterprise security engineering, including next-generation firewalls, TLS/SSL inspection, PKI/cryptography in transit, microsegmentation, and zero-trust policies.
Strong cross-functional leadership and communication skills, with a track record of driving consensus on complex technical architectures across IT, Engineering, and Security teams.
Bachelor’s degree in Computer Science, Management Information Systems, or a related technical field, or equivalent practical work experience.

Nice To Haves

Advanced industry certifications such as CCIE/CCNP, ZDTA/ZDTE, or Cloud Network Specialties.
Background as an Enterprise Network Architect or Principal Network Engineer specializing in global SASE/Zero Trust migrations.
Background as a Cloud Network Infrastructure Engineer bridging enterprise data centers with AWS/Azure hybrid environments.
Background as a Network Security Engineer with extensive production experience scaling Zscaler (ZIA/ZPA) and identity-aware proxy architectures.
Background as a Network Automation Engineer with deep expertise in Python, Terraform, and automated configuration compliance.

Responsibilities

Own the long-term technical direction, multi-year roadmap, and reference architecture for the global network across corporate offices, data centers, and multi-cloud IaaS environments.
Lead the architectural evolution and operational maturity of the enterprise SASE/SSE platform, including Zscaler ZIA and ZPA, and transition legacy perimeter access to a least-privilege Zero Trust Network Access model.
Partner with Identity, InfoSec, and Platform teams to integrate network access controls with identity providers, device posture validation, and SIEM logging pipelines.
Drive network automation and infrastructure-as-code initiatives, developing scalable tooling to reduce operational toil and enforce consistent configuration standards across global environments.
Serve as the principal escalation authority for critical network incidents, directing root-cause investigations and implementing durable architectural remediations.
Mentor network engineering team members through technical design reviews and knowledge sharing, and establish operational standards.
Conduct vendor evaluations and technology assessments and provide build-versus-buy recommendations aligned with enterprise compliance, capacity, and performance requirements.