Network Engineer

Procore Technologies is the leading technology partner for every stage of construction. We empower construction teams to drive efficiency and mitigate risk through actionable AI & data-driven insights. For over 20 years, we have been transforming the industry with purpose-built solutions for construction professionals and we’re looking for talented people to help us build together.

We are looking for a Staff Network Engineer to serve as the technical lead for Procore's corporate network across on-premises and cloud environments. As the Staff Network Engineer on our IT Infrastructure team
, you will work closely with Security, Cloud/Platform Engineering, IT leadership, and external partners to establish reference architectures, advance our Zero Trust/SASE strategy, and build scalable network automation. Your strengths in enterprise network architecture, Zero Trust/SASE platforms (Zscaler ZIA/ZPA), and cloud networking infrastructure will drive your success.

You will report to the Manager of Network Engineering and will be based in our Austin, TX office with a very flexible hybrid work week.

• Own the long-term technical direction, multi-year roadmap, and reference architecture for Procore's global network footprint across corporate offices, data centers, and multi-cloud IaaS environments.
• Lead the architectural evolution and operational maturity of our enterprise SASE/SSE platform (Zscaler ZIA and ZPA), transitioning legacy perimeter access to a secure, least-privilege Zero Trust Network Access (ZTNA) model.
• Partner with Identity, Info Sec, and Platform teams to integrate network access controls with identity providers (SAML/SCIM), device posture validation, and SIEM logging pipelines.
• Drive network automation and infrastructure-as-code initiatives, engineering scalable tooling that reduces operational toil and enforces consistent configuration standards across global environments.
• Serve as the principal escalation authority for critical network incidents, directing root-cause investigations and implementing durable architectural remediations.
• Mentor and elevate network engineering team members through technical design reviews, knowledge sharing, and establishing best-in-class operational standards.
• Conduct vendor evaluations and technology assessments to deliver well-reasoned build-versus-buy recommendations aligned with enterprise compliance, capacity, and performance requirements.

• Extensive enterprise network engineering experience designing, deploying, and operating highly available routing (BGP, OSPF), switching, SD-WAN, and hybrid cloud network topologies.
• Proven hands-on production expertise architecting and administering SASE/ZTNA platforms at enterprise scale, with deep knowledge of Zscaler ZIA and ZPA (or comparable platforms such as Palo Alto Prisma Access, Netskope, or Cloudflare One).
• Strong technical background in multi-cloud networking (AWS and/or Azure/GCP), including transit gateway design, VPC/VNet peering, direct interconnects, and hybrid cloud connectivity.
• Demonstrated capability with network automation and infrastructure-as-code tooling (e.g., Python, Ansible, Terraform) to manage distributed network state programmatically.
• In-depth understanding of enterprise security engineering, including next-generation firewalls, TLS/SSL inspection, PKI/cryptography in transit, microsegmentation, and zero-trust policies.
• Strong cross-functional leadership and communication skills, with a track record of driving consensus on complex technical architectures across IT, Engineering, and Security teams.
• Bachelor's degree in Computer Science, Management Information Systems, or a related technical field, or equivalent practical work experience; advanced industry…