Principal Network Engineer – Global Infrastructure & Cyber Resilience

The Opportunity

As a Principal Network Engineer at Commvault, you will not just sit in an ivory tower drawing diagrams. We are looking for a Player‑Coach—a technical heavyweight who possesses the vision to architect a global network and the grit to build and troubleshoot it personally.

This role is defined by Deep Execution
. You will own the full lifecycle of our global connectivity fabric, from the initial whiteboarding of a Zero Trust framework to the hands‑on configuration of the solution and the resolution of complex multi‑cloud routing issues. If you are a high‑level architect who has moved away from the CLI, this is not the role for you; we need a leader who stays "close to the packets" while guiding our long‑term technical strategy.

• Build & Deploy:
  Take primary responsibility for the "First Build." You will lead the hands‑on implementation of global SD‑WAN and Cloud nodes, ensuring the transition from design to production is flawless.
• Deep‑Dive Troubleshooting:
  Act as the ultimate technical escalation point. When Tier‑3 hits a wall, you dive into the logs, PCAPs, and routing tables to identify and fix the root cause.
• Network‑as‑Code:
  Personally develop and maintain Terraform and Ansible playbooks to automate the global environment, ensuring you are driving the execution of automation, not just suggesting it.

• GCP & Azure Execution:
  Physically build and manage the transit gateways, VPC/VNet peering, and Cloud Interconnects that power our multi‑cloud ecosystem.
• SD‑WAN Mastery:
  Take the lead in configuring Prisma Access and NGFWs. You will own the policy engine, hands‑on, ensuring security is baked into every route and interface.
• Zero Trust Integration:
  Move beyond the "Zero Trust" buzzword by executing the actual micro‑segmentation and identity‑based access controls across our hybrid footprint.

• Zscaler and Firewall Expert:
  Act as the Subject Matter Expert for Next‑Generation Firewalls, Zscaler Private Access, and Zero Trust Network Access. Own the global policy sets, SSL decryption strategies, and threat prevention profiles.
• Hybrid Connectivity:
  Manage complex Site‑to‑Site VPNs, GRE tunnels, and high‑speed interconnects that link our global data centers with public cloud regions.

• Strategic Influence:
  Partner with the CISO and Director of Infrastructure to align networking goals with broader business initiatives.
• Technical Mentorship:
  Lead and upskill a global team of senior and mid‑level engineers. Conduct architectural reviews and set the "gold standard" for documentation and code‑based infrastructure.
• Vendor Management:
  Lead technical evaluations and QBRs with key partners (Google, Microsoft, Palo Alto), ensuring Commvault is leveraging the latest features and optimal pricing.
• Lead by Example:
  Set the technical standard for the engineering team by demonstrating best practices in configuration, documentation, and operational discipline.
• Executive Communication:
  Translate complex technical "war stories" and execution hurdles into concise executive summaries for leadership, providing clear paths for risk mitigation.

• Infrastructure as Code (IaC):
  Champion a "Network‑as‑Code" mindset using Terraform, Ansible, or Python to automate repetitive tasks and ensure 100% configuration consistency.
• Operational Resilience:
  Own Tier‑4 escalations for complex network outages. Lead Root Cause Analysis sessions that translate technical failures into actionable business improvements.

• Experience:
  
  12+ years in Network Engineering, with a career path that proves you have never lost your "hands‑on" edge.
• Location:
  
  Preferably in New Jersey to help own the hardware in the corporate data center.
• "In‑the‑Trenches" Expertise:
  Proven ability to build, operate, and troubleshoot complex environments across Palo Alto (PCNSE level), GCP, and Azure.
• SD‑WAN & Zero Trust:
  Direct experience deploying Zscaler SD‑WAN and implementing ZTNA frameworks in a global enterprise.
• The "Principal" Skillset:
  Expert‑level mastery of BGP, EVPN/VXLAN, and stateful…