Staff Network Engineer

Company Description

Our Mission

At Palo Alto Networks® everything starts and ends with our mission:

Being the cybersecurity partner of choice, protecting our digital way of life.

We have the vision of a world where each day is safer and more secure than the one before. These aren’t easy goals to accomplish – but we’re not here for easy. We’re here for better. We are a company built on the foundation of challenging and disrupting the way things are done, and we’re looking for innovators who are as committed to shaping the future of cybersecurity as we are.

We’re changing the nature of work. Palo Alto Networks is evolving to meet the needs of our employees now and in the future through FLEXWORK, our approach to how we work. From benefits to learning, location to leadership, we’ve rethought and recreated every aspect of the employee experience at Palo Alto Networks.  And because it FLEXes around each individual employee based on their individual choices, employees are empowered to push boundaries and help us all evolve, together.

Job Description

Your Career

This position will be a part of the team responsible for Palo Alto Networks’ network and security infrastructure for all enterprise, partner, and customer-facing services. You will work with a team of Senior-level Network Engineers leading projects crafting, implementing, and maintaining our global WAN/LAN network infrastructure. Dynamic, fast-changing and unpredictable defines our information technology team. You will also be provided with opportunities to work on Palo Alto

Are you a motivated, intelligent, creative, and hardworking individual who wants to contribute and make a difference? If yes, this job is for you!

Your Impact

• Design, implement and provide support for all network-related hardware/software
• Ensure system uptime and backup for network-related equipment
• Work with the team on Network Deployments in GCP, Azure and AWS
• Conduct security assessments (with security team) and make recommendations on data/voice network (LAN, WLAN, WAN, DMZ, Internet), disaster recovery, remote access, network appliances, servers, and directory services security
• Conduct incident triage and response, including working with firewall and device logs, investigating security events, protecting forensic value of data and establishing monitoring and incident reporting and response procedures
• Using your coding expertise in Ansible/Python, automate firewall policy management
• Work on establishing consistent metrics and collection methods for device log aggregation and review procedures
• Assist with defining the objectives of network implementations including developing and reviewing proposals and presentations
• Oversee security of hosted services and applications including security requirements and architecture, risk analysis, and periodic change reviews
• Work closely with engineering to help report issues and lead project deliverables and provide status and progress reports
• Provide comprehensive and timely support to all SOX and internal audit issues as they relate to Security Operations including analyzing data privacy requirements and implementing business process and IT controls

Qualifications

Your Experience

• BSCS or related field, MS preferred or equivalent military experience required 
• Knowledge of Network scripting, automation and analytics
• Experienced understanding of networking and routing protocols such as, TCP/IP, BGP4 (multi-homing), OSPF (multi-area), RIP, ISIS, etc.
• Working knowledge in the operation of Ethernet LAN switching protocols and standards including, VLANs, VLAN aggregation, EtherChannel, PVLANs, Spanning Tree & Rapid Spanning Tree, 802.1Q
• Extensive background in planning and crafting projects and analyzing existing network systems and procedures for efficiency and effectiveness
• Experience with Load Balancers, F5 preferred, AVI Load balancer and NGINX
• 1e, and CAT and fiber cable distribution systems
• Knowledge of data center design, build-out, and standard methodologies
• Experience with cloud providers- GCP, AWS and Azure
• Experience performing configuration and troubleshooting of Network platforms
• Knowledge of firewalls technologies, including VPNs and routing
• Ability to analyze network packet traces (PCAP)
• Understanding of network security systems, intrusion detection systems and protocols including, ACE, ACS, VPN, GRE, IPSEC, IKE, TACACS, RADIUS, ACLs, 802.1x, audits, log files, etc.
• Strong analytical skills for interpreting business requirements and translating them into technical specifications
• Superb communication skills, including the ability to write network and security documentation