# Principal-level Palo Alto Networks Subject Matter Expert

**Company**: GDIT
**Location**: Any Location / Remote
**Work arrangement**: remote
**Experience**: senior
**Job type**: full-time
**Salary**: $153,000 - $207,000
**Category**: Engineering
**Industry**: Technology

**Apply**: https://gdit.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/Any-Location--Remote/Principal-Palo-Alto-Networks-SME_RQ231417-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_b3d8a3d6-811

## Description

The NGG program is seeking a Principal-level Palo Alto Networks Subject Matter Expert to lead the design, deployment, and optimization of advanced network security architectures.

This role provides senior-level technical leadership across firewall engineering, network segmentation, threat prevention, and Zero Trust integration. The ideal candidate has deep, hands-on expertise with Palo Alto Networks platforms and can drive enterprise-scale solutions from strategy through implementation.

**Key Responsibilities:**

- Lead architecture, engineering, and configuration of Palo Alto firewalls across NGG environments

- Own the design and deployment of security policies, NAT, app-ID, user-ID, and threat profiles

- Architect and optimize Panorama for centralized management, multi-tenant configurations, and scale

- Implement Zero Trust segmentation aligned with NGG security requirements

- Support migration from legacy security stacks to Palo Alto platforms

- Develop high-quality design artifacts: HLDs, LLDs, diagrams, runbooks, implementation plans

- Conduct advanced troubleshooting, packet analysis, and platform tuning

- Advise program leadership on best practices, risks, and roadmap recommendations

- Collaborate with cross-functional engineering teams (network, cloud, cyber, operations)

- Provide mentorship to junior engineers and serve as authoritative technical decision maker

**Required Qualifications:**

- BA/BS or equivalent, 10+ years of experience

- 10+ years in network security engineering with 5+ years hands-on Palo Alto Networks experience

- Deep expertise in: Panorama, virtual and hardware firewalls, GlobalProtect, Threat Prevention, URL Filtering, WildFire

- Proven experience architecting large-scale, mission-critical firewall infrastructures

- Strong understanding of routing, VLANs, IPSec VPN, BGP/OSPF, and network segmentation

- Experience with Zero Trust frameworks and micro-segmentation strategies

- Ability to create detailed engineering documentation and lead complex deployments

- Strong communication skills with ability to brief leadership and stakeholders

- Secret Security Clearance

**Benefits:**

- Full-flex work week (where eligible and approved)

- 401(k) with company match

- Comprehensive health and wellness packages

- Professional growth opportunities, internal mobility, paid education, and certifications

- Paid vacation and holidays

## Skills

### Required
- Palo Alto Networks
- Network Security Engineering
- Zero Trust Architecture
- Panorama
- GlobalProtect
- Threat Prevention
- URL Filtering
- WildFire

### Nice to have
- Palo Alto WildFire
- PCNSE or higher
- automation frameworks
- SIEM
- SOAR
- identity platforms

---

Source: [Apply at gdit.wd5.myworkdayjobs.com](https://gdit.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/Any-Location--Remote/Principal-Palo-Alto-Networks-SME_RQ231417-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)