Principal SME, Palo Alto Networks

This is a fully remote position, open to applicants in United States.

📋 Description

• Lead the architecture, engineering, and configuration of Palo Alto firewalls within NGG environments.

• Take ownership of the design and implementation of security policies, NAT, App-ID, User-ID, and threat profiles.

• Architect and enhance Panorama for centralized management, multi-tenant setups, and scalability.

• Implement Zero Trust segmentation in accordance with NGG security standards.

• Assist in the migration from legacy security frameworks to Palo Alto platforms.

• Develop High-Level Designs (HLDs), Low-Level Designs (LLDs), diagrams, runbooks, and implementation plans.

• Perform advanced troubleshooting, packet analysis, and platform optimization.

• Provide guidance to program leadership on best practices, risks, and recommendations for the roadmap.

• Collaborate with teams in network, cloud, cyber, and operations engineering.

• Mentor junior engineers and act as a key technical decision-maker.

• Deliver architectural designs, implementation plans, technical documentation, configured firewalls, Panorama templates, policy baselines, migration plans, cutover support, ongoing engineering support, optimization, and troubleshooting.

⛳️ Requirements

• BA/BS degree or equivalent.

• Over 10 years of relevant experience.

• More than 10 years in network security engineering with at least 5 years of hands-on experience with Palo Alto Networks.

• Extensive knowledge of Panorama, virtual and hardware firewalls, GlobalProtect, Threat Prevention, URL Filtering, and WildFire.

• Demonstrated experience in architecting large-scale, mission-critical firewall infrastructures.

• Strong understanding of routing, VLANs, IPSec VPN, BGP/OSPF, and network segmentation.

• Familiarity with Zero Trust frameworks and micro-segmentation strategies.

• Ability to produce detailed engineering documentation and lead complex deployments.

• Excellent communication skills to effectively brief leadership and stakeholders.

• Secret Security Clearance is required.

• US Citizenship is mandatory.

• PCNSE or higher (PCSNE, PSE certifications) is preferred.

• Hands-on experience with Palo Alto WildFire is preferred.

• Experience with automation frameworks (Terraform, Ansible, PanOS APIs) is preferred.

• Background in supporting federal or regulated environments is preferred.

• Experience integrating Palo Alto with SIEM, SOAR, and identity platforms is preferred.

• Willingness to travel 25–50% is required.

🏝️ Benefits

• Full-flex work week (where eligible and approved).

• 401(k) with company match.

• Comprehensive health and wellness packages.

• Opportunities for professional growth.

• Internal mobility options.

• Paid education and certification programs.

• Paid vacation and holidays.

• Medical plan options, some including Health Savings Accounts.

• Dental plan options.

• Vision plan options.

• Paid sick and personal time off.

• Paid leave for parental, military, bereavement, and jury duty purposes.

• Up to 160 hours of paid family leave within a rolling 12-month period for eligible employees.

• Short- and long-term disability benefits.

• Life insurance coverage.

• Accidental death and dismemberment insurance.

• Personal accident insurance.

• Critical illness insurance.

• Business travel and accident insurance.