Principal SRE

Palo Alto Networks

Principal SRE

Santa Clara, CA
Full Time
Paid
  • Responsibilities

    Job Description

    Your Career

    Palo Alto Networks™ is a revolutionary and dynamic company creating next generation network security products. If you are a motivated, intelligent, creative, and hardworking individual who wants to contribute and make a difference, this job is for you!

    Fast-paced, fast-changing and unpredictable defines our information technology team. We are looking for analytical, agile, and influential leaders who can quickly deliver meaningful results and solutions with the flexibility to accommodate evolving business needs and shifting priorities.

    This position is responsible for Palo Alto Networks’ (PANW) network and security infrastructure for all enterprise, partner, and customer facing services. A successful candidate for this role will have strong project management and organization skills to complement their technical skills. You will work with a team of senior level IaC Automation Engineers leading projects designing, implementing, and maintaining PANWs global compute infrastructure.

    Your Impact

    • Design, implement and provide support for IT infrastructure compute components
    • Install, support and maintain software infrastructure according to best practices, including routers, Load balancers, switches, wifi controllers, and firewalls via terraform/ansible automation
    • Perform network security design and integration
    • Diagnose problems and solve issues, often under time constraints
    • Implement the necessary controls and procedures to protect information systems assets from intentional or inadvertent modification, disclosure, or destruction
    • Ensure system uptime and backup for all IT infrastructure
    • Provide security incident triage and response, including working with firewall and device logs, investigating security events, protecting forensic value of data and establishing monitoring and incident reporting and response procedures
    • Work closely with engineering to help report issues and manage project deliverables and provide status and progress reports
    • Provide on-call support for Incident Management
  • Qualifications

    Qualifications

    Your Experience

    • 8+ years experience in IAC and infra automation tools
    • BSCS or related field, MS preferred or equivalent military experience required
    • Expert knowledge on cloud orchestration via GKE / EKS, etc
    • Extensive background in planning and designing projects and analyzing existing distributed systems and procedures for efficiency and effectiveness
    • Experience with Load Balancers, F5 preferred, Reverse proxy (nginx)
    • Knowledge of data center design, build-out, and best practices
    • Experienced in designing and implementing Business Continuity Plans and Disaster Recovery Plans and facilities
    • Experience performing configuration and troubleshooting of Cisco & Arista routing/switching platforms
    • Expert knowledge of firewalls technologies (PANW preferred), including VPNs and routing
    • Experience with multi-tier architectures, including best practices around tier isolation (for databases, etc)
    • Extensive knowledge of network security systems, intrusion detection systems and protocols including, ACE, ACS, VPN, GRE, IPSEC, IKE, TACACS, RADIUS, ACLs, 802.1x, audits, log files etc.
    • Basic knowledge of shell scripting and programming languages such a PERL, Ruby, PHP, or Python
    • Advanced knowledge of DNS and DHCP and Microsoft AD infrastructure
    • Strong analytical skills for interpreting business requirements and translating them into technical specifications
    • Strong project management, time management, and organizational skills
    • Excellent communication skills, including the ability to write network and security documentation, policies, and guidelines
    • Ability to work nights and weekends and provide 24/7 on-call support
    • Well-versed in commercial InfoSec requirements, guidance and standards

    Additional Information

    The Team

    Working at a high-tech cybersecurity company within Information Technology is a once-in-a-lifetime opportunity. You’ll join the brightest minds in technology, creating, building, and supporting tools and enabling our global teams on the front line of defense against cyberattacks.

    We’re connected by one mission but driven by the impact of that mission and what it means to protect our way of life in the digital age. Join a dynamic and fast-paced team of people who feel excited by the prospect of a challenge and feel a thrill at resolving technical gaps that inhibit productivity.

    Compensation Disclosure

    The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/commissioned roles) is expected to be between $154,000/YR - $249,500/YR. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found here.

    Our Commitment

    We’re problem solvers that take risks and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together.

    We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at accommodations@paloaltonetworks.com.

    Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.

    All your information will be kept confidential according to EEO guidelines.