Principal Palo Alto Networks SME

Type of Requisition:
Regular

Clearance Level Must Currently Possess:
Secret

Clearance Level Must Be Able to Obtain:
Secret

Public Trust/Other

Required:

None

Job Family:
Technical Solutions

Skills:

IT Roadmap, Network Security Engineering, Zero Trust Architecture

Certifications:

None

Experience:

10 + years of related experience

US Citizenship

Required:

Yes

Overview:
The NGG program is seeking a Principal‑level Palo Alto Networks Subject Matter Expert to lead the design, deployment, and optimization of advanced network security architectures. This role provides senior‑level technical leadership across firewall engineering, network segmentation, threat prevention, and Zero Trust integration. The ideal candidate has deep, hands‑on expertise with Palo Alto Networks platforms and can drive enterprise‑scale solutions from strategy through implementation.

• Lead architecture, engineering, and configuration of Palo Alto firewalls across NGG environments
• Own the design and deployment of security policies, NAT, app‑, user‑, and threat profiles
• Architect and optimize Panorama for centralized management, multi‑tenant configurations, and scale
• Implement Zero Trust segmentation aligned with NGG security requirements
• Support migration from legacy security stacks to Palo Alto platforms
• Develop high‑quality design artifacts: HLDs, LLDs, diagrams, runbooks, implementation plans
• Conduct advanced troubleshooting, packet analysis, and platform tuning
• Advise program leadership on best practices, risks, and roadmap recommendations
• Collaborate with cross‑functional engineering teams (network, cloud, cyber, operations)
• Provide mentorship to junior engineers and serve as authoritative technical decision maker

• BA/BS or equivalent, 10+ years of experience
• 10+ years in network security engineering with 5+ years hands‑on Palo Alto Networks experience
• Deep expertise in:
  Panorama, virtual and hardware firewalls, Global Protect, Threat Prevention, URL Filtering, Wild Fire
• Proven experience architecting large‑scale, mission‑critical firewall infrastructures
• Strong understanding of routing, VLANs, IPSec VPN, BGP/OSPF, and network segmentation
• Experience with Zero Trust frameworks and micro‑segmentation strategies
• Ability to create detailed engineering documentation and lead complex deployments
• Strong communication skills with ability to brief leadership and stakeholders
• Secret Security Clearance

• Candidate has hands‑on experience with Palo Alto Wild Fire, including deployment, configuration, policy integration, and operational troubleshooting in enterprise environments.
• PCNSE or higher (PCSNE, PSE certifications)
• Experience with automation frameworks (Terraform, Ansible, PanOS APIs)
• Background supporting federal or regulated environments
• Experience integrating Palo Alto with SIEM, SOAR, and identity platforms

• Architecture designs, implementation plans, and technical documentation
• Configured firewalls, Panorama templates, and policy baselines
• Migration plans and cutover support
  
  Ongoing engineering support, optimization, and troubleshooting

• Full‑flex work week (where eligible and approved).
• 401(k) with company match.
• Comprehensive health and wellness packages.
• Professional growth opportunities, internal mobility, paid education, and certifications.
• Paid vacation and holidays.

#GDITPriority

The likely salary range for this position is $153,000 - $207,000. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

40

25-50%

Remote

A…