Skip to content
Updated How AI-exposed are the skills employers are hiring for? See the data →

From the employer's careers site First seen 5 Nov 2026

Principal-level Palo Alto Networks Subject Matter Expert

GDIT Any Location / Remote Remote senior full-time

Salary

$153,000 - $207,000 per year

Apply on GDIT

Description

The NGG program is seeking a Principal-level Palo Alto Networks Subject Matter Expert to lead the design, deployment, and optimization of advanced network security architectures.

This role provides senior-level technical leadership across firewall engineering, network segmentation, threat prevention, and Zero Trust integration. The ideal candidate has deep, hands-on expertise with Palo Alto Networks platforms and can drive enterprise-scale solutions from strategy through implementation.

Key Responsibilities:

  • Lead architecture, engineering, and configuration of Palo Alto firewalls across NGG environments
  • Own the design and deployment of security policies, NAT, app-ID, user-ID, and threat profiles
  • Architect and optimize Panorama for centralized management, multi-tenant configurations, and scale
  • Implement Zero Trust segmentation aligned with NGG security requirements
  • Support migration from legacy security stacks to Palo Alto platforms
  • Develop high-quality design artifacts: HLDs, LLDs, diagrams, runbooks, implementation plans
  • Conduct advanced troubleshooting, packet analysis, and platform tuning
  • Advise program leadership on best practices, risks, and roadmap recommendations
  • Collaborate with cross-functional engineering teams (network, cloud, cyber, operations)
  • Provide mentorship to junior engineers and serve as authoritative technical decision maker

Required Qualifications:

  • BA/BS or equivalent, 10+ years of experience
  • 10+ years in network security engineering with 5+ years hands-on Palo Alto Networks experience
  • Deep expertise in: Panorama, virtual and hardware firewalls, GlobalProtect, Threat Prevention, URL Filtering, WildFire
  • Proven experience architecting large-scale, mission-critical firewall infrastructures
  • Strong understanding of routing, VLANs, IPSec VPN, BGP/OSPF, and network segmentation
  • Experience with Zero Trust frameworks and micro-segmentation strategies
  • Ability to create detailed engineering documentation and lead complex deployments
  • Strong communication skills with ability to brief leadership and stakeholders
  • Secret Security Clearance

Benefits:

  • Full-flex work week (where eligible and approved)
  • 401(k) with company match
  • Comprehensive health and wellness packages
  • Professional growth opportunities, internal mobility, paid education, and certifications
  • Paid vacation and holidays

Skills

Required

  • Palo Alto Networks
  • Network Security Engineering
  • Zero Trust Architecture
  • Panorama
  • GlobalProtect
  • Threat Prevention
  • URL Filtering
  • WildFire

Nice to have

  • Palo Alto WildFire
  • PCNSE or higher
  • automation frameworks
  • SIEM
  • SOAR
  • identity platforms

Ready to apply?

You apply with the employer directly. Their original posting is here: https://gdit.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/Any-Location--Remote/Principal-Palo-Alto-Networks-SME_RQ231417-1

Apply on GDIT