Principal Palo Alto Networks SME

Type of

Requisition :
Regular Clearance Level Must Currently Possess:
Secret Clearance Level Must Be Able to Obtain:
Secret Public Trust/Other

Required:

None Job Family:
Technical Solutions

Job Qualifications:

Skills:

IT Roadmap, Network Security Engineering, Zero Trust Architecture

Certifications:

None

Experience:

10 + years of related experience US Citizenship

Required:

Yes

The NGG program is seeking a Principal-level Palo Alto Networks Subject Matter Expert to lead the design, deployment, and optimization of advanced network security architectures. This role provides senior‑level technical leadership across firewall engineering, network segmentation, threat prevention, and Zero Trust integration. The ideal candidate has deep, hands‑on expertise with Palo Alto Networks platforms and can drive enterprise‑scale solutions from strategy through implementation.

• Lead architecture, engineering, and configuration of Palo Alto firewalls across NGG environments
• Own the design and deployment of security policies, NAT, app-, user-, and threat profiles
• Architect and optimize Panorama for centralized management, multi‑tenant configurations, and scale
• Implement Zero Trust segmentation aligned with NGG security requirements
• Support migration from legacy security stacks to Palo Alto platforms
• Develop high-quality design artifacts: HLDs, LLDs, diagrams, runbooks, implementation plans
• Conduct advanced troubleshooting, packet analysis, and platform tuning
• Advise program leadership on best practices, risks, and roadmap recommendations
• Collaborate with cross‑functional engineering teams (network, cloud, cyber, operations)
• Provide mentorship to junior engineers and serve as authoritative technical decision maker

• BA/BS or equivalent, 10+ years of experience
• 10+ years in network security engineering with 5+ years hands‑on Palo Alto Networks experience
• Deep expertise in:
  Panorama, virtual and hardware firewalls, Global Protect, Threat Prevention, URL Filtering, Wild Fire
• Proven experience architecting large‑scale, mission‑critical firewall infrastructures
• Strong understanding of routing, VLANs, IPSec VPN, BGP/OSPF, and network segmentation
• Experience with Zero Trust frameworks and micro‑segmentation strategies
• Ability to create detailed engineering documentation and lead complex deployments
• Strong communication skills with ability to brief leadership and stakeholders
• Secret Security Clearance

• Candidate has hands‑on experience with Palo Alto Wild Fire, including deployment, configuration, policy integration, and operational troubleshooting in enterprise environments.
• PCNSE or higher (PCSNE, PSE certifications)
• Experience with automation frameworks (Terraform, Ansible, PanOS APIs)
• Background supporting federal or regulated environments
• Experience integrating Palo Alto with SIEM, SOAR, and identity platforms

• Architecture designs, implementation plans, and technical documentation
• Configured firewalls, Panorama templates, and policy baselines
• Migration plans and cutover support
• Ongoing engineering support, optimization, and troubleshooting

Full-flex work week (where eligible and approved). 401(k) with company match. Comprehensive health and wellness packages. Professional growth opportunities, internal mobility, paid education, and certifications. Paid vacation and holidays.

$153,000 - $207,000. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

Travel Required:

25-50%

Remote

Work Location:

Any Location / Remote

• Our…