Principal IT Site Reliability Engineer

Principal IT Site Reliability Engineer

At Palo Alto Networks, everything starts and ends with our mission: Being the cybersecurity partner of choice, protecting our digital way of life. Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and we're looking for innovators who are as committed to shaping the future of cybersecurity as we are.

We take our mission of protecting the digital way of life seriously. We are relentless in protecting our customers and we believe that the unique ideas of every member of our team contributes to our collective success. Our values were crowdsourced by employees and are brought to life through each of us everyday - from disruptive innovation and collaboration, to execution. From showing up for each other with integrity to creating an environment where we all feel included.

As a member of our team, you will be shaping the future of cybersecurity. We work fast, value ongoing learning, and we respect each employee as a unique individual. Knowing we all have different needs, our development and personal wellbeing programs are designed to give you choice in how you are supported. This includes our FLEXBenefits wellbeing spending account with over 1,000 eligible items selected by employees, our mental and financial health resources, and our personalized learning opportunities - just to name a few!

At Palo Alto Networks, we believe in the power of collaboration and value in-person interactions. This is why our employees generally work full time from our office with flexibility offered where needed. This setup fosters casual conversations, problem-solving, and trusted relationships. Our goal is to create an environment where we all win with precision.

Palo Alto Networks™ is a revolutionary and dynamic company creating next generation network security products. If you are a motivated, intelligent, creative, and hardworking individual who wants to contribute and make a difference, this job is for you!

Fast-paced, fast-changing and unpredictable defines our information technology team. We are looking for analytical, agile, and influential leaders who can quickly deliver meaningful results and solutions with the flexibility to accommodate evolving business needs and shifting priorities.

This position is responsible for Palo Alto Networks' (PANW) network and security infrastructure for all enterprise, partner, and customer facing services. A successful candidate for this role will have strong project management and organization skills to complement their technical skills. You will work with a team of senior level IaC Automation Engineers leading projects designing, implementing, and maintaining PANWs global compute infrastructure.

Your impact includes:

• Design, implement and provide support for IT infrastructure compute components
• Install, support and maintain software infrastructure according to best practices, including routers, Load balancers, switches, wifi controllers, and firewalls via terraform/ansible automation
• Perform network security design and integration
• Diagnose problems and solve issues, often under time constraints
• Implement the necessary controls and procedures to protect information systems assets from intentional or inadvertent modification, disclosure, or destruction
• Ensure system uptime and backup for all IT infrastructure
• Provide security incident triage and response, including working with firewall and device logs, investigating security events, protecting forensic value of data and establishing monitoring and incident reporting and response procedures
• Work closely with engineering to help report issues and manage project deliverables and provide status and progress reports
• Provide on-call support for Incident Management

Your experience must have:

• 8+ years of experience in IAC and infra automation tools, using Terraform & Ansible, CI/CD tools
• Expert knowledge on cloud orchestration via GKE / EKS, etc, preferably on GCP
• Experienced in designing and implementing Business Continuity Plans and Disaster Recovery Plans
• Expert knowledge of firewall technologies (PANW preferred), including VPNs and routing
• Advanced knowledge of shell scripting and programming languages such a PERL, Ruby, PHP, or Python
• Advanced knowledge of DNS and DHCP, and Microsoft AD infrastructure
• Strong analytical skills for interpreting business requirements and translating them into technical specifications
• Strong project management, time management, and organizational skills
• Excellent communication skills, including the ability to write network and security documentation, policies, and guidelines
• Ability to work nights and weekends and provide 24/7 on-call support

Nice to have:

• BSCS or related field, MS preferred, or equivalent military experience required
• Extensive background in planning and designing projects, and analyzing existing distributed systems and procedures for efficiency and effectiveness
• Experience with Load Balancers, HAProxy, F5, nginx
• Knowledge of data center design, build-out, and best practices
• Knowledge of virtualization platforms, preferably Openshift
• Experience with multi-tier architectures, including best practices around tier isolation (for databases, etc.)
• Extensive knowledge of network security systems, intrusion detection systems, and protocols, including ACE, ACS, VPN, GRE, IPSEC, IKE, TACACS, RADIUS, ACLs, 802.1x, audits, log files, etc.
• Well-versed in commercial InfoSec requirements, guidance, and standards