> Markdown version of [/jobs/ext/1937030-principal-enterprise-network-security-architect](https://www.wearedevelopers.com/jobs/ext/1937030-principal-enterprise-network-security-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Principal Enterprise Network Security Architect

- **Company:** Palo Alto Networks
- **Location:** United States
- **Contract:** Permanent contract
- **Skills:** Microsoft Access, Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Microsoft Azure, Computer Networks, Continuous Integration, High-Level Architecture, Intrusion Detection Systems, Virtual Private Networks (VPN), Network Security, Network Planning and Design, Routing, Network Segmentation, Ansible, Zero Trust Network Access, TCP/IP, Google Cloud, Software Troubleshooting, Cyber Threat Analysis, Juniper, Palo Alto Networks, Data Analytics, Machine Learning Operations, Terraform, Security Orchestration, Automation & Response
- **Published:** August 5, 2026
- **Apply:** https://us.experteer.com/career/view-jobs/principal-enterprise-network-security-architect-usa-58799486

## About the Role

design products and third-party platforms for visibility, protection, and threat intel * Champion network security automation using scripting, CI/CD pipelines, and infrastructure-as-code * Serve as escalation authority during security events and design long-term architectural remediations * Provide technical mentorship and contribute to architectural standards and security-first culture Tasks * 12+ years of progressive enterprise networking and network security engineering experience with leadership in large-scale environments * Deep expertise in Zero Trust, advanced network segmentation, and designing securing global hybrid-cloud infrastructures (AWS, Azure, GCP with on-prem) * Hands-on experience with security automation and infrastructure-as-code (Terraform, Ansible); automation-first environment * Experience using AI/ML tools to simplify operations and enable auto-healing * Strong understanding of AI and Large Language Model architectures and secure AI-enabled solutions (identity, data a
aaaaaE_ prompt injection, API protection) * Expertise in firewall technologies, VPN, IDS/IPS, NAC, and micro-segmentation * Mastery of routing, switching, TCP/IP; experience with Arista, Juniper, or equivalent hardware * Must be local to SF bay area * Preferred: experience with Palo Alto products (NGFW, Panorama, Prisma Access) * Strong troubleshooting and cross-functional collaboration skills Key requirements *

## Description

Experteer Overview In this role, you will own and govern the global network security architecture, shaping secure, scalable hybrid environments. You'll align security across IT and infrastructure teams to embed security into network design and policy. You drive remediation of vulnerabilities and advance automation using IaC and CI/CD. You will mentor engineers and uphold a security-first culture while leveraging AI-driven insights. This is a high-impact opportunity to strengthen our threat posture at scale. Compensation / Benefits * Own the architectural blueprint and governance for the global network security footprint across hybrid environments * Define, develop, and enforce enterprise-wide security policies (segmentation, access control, traffic inspection) as a SME * Integrate security across network design with security, infrastructure, and IT teams * Identify vulnerabilities and lead remediation across on-prem and cloud environments using best practices * Leverage Palo Alto Networks products and third-party platforms for visibility, protection, and threat intel * Champion network security automation using scripting, CI/CD pipelines, and infrastructure-as-code * Serve as escalation authority during security events and design long-term architectural remediations * Provide technical mentorship and contribute to architectural standards and security-first culture Tasks * 12+ years of progressive enterprise networking and network security engineering experience with leadership in large-scale environments * Deep expertise in Zero Trust, advanced network segmentation, and designing securing global hybrid-cloud infrastructures (AWS, Azure, GCP with on-prem) * Hands-on experience with security automation and infrastructure-as-code (Terraform, Ansible); automation-first environment * Experience using AI/ML tools to simplify operations and enable auto-healing * Strong understanding of AI and Large Language Model architectures and secure AI-enabled solutions (identity, data privacy, prompt injection, API protection) * Expertise in firewall technologies, VPN, IDS/IPS, NAC, and micro-segmentation * Mastery of routing, switching, TCP/IP; experience with Arista, Juniper, or equivalent hardware * Must be local to SF bay area * Preferred: experience with Palo Alto products (NGFW, Panorama, Prisma Access) * Strong troubleshooting and cross-functional collaboration skills Key requirements *


## Related Videos

- [Small, Secure, Interconnected: The next Internet Protocol](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol)
- [Dev & Test in the Cloud? Deploy your cloud environments with Ansible & Terraform](https://www.wearedevelopers.com/videos/1607-dev-test-in-the-cloud-deploy-your-cloud-environments-with-ansible-terraform)
- [An Applied Introduction to eBPF with Go](https://www.wearedevelopers.com/videos/1075-an-applied-introduction-to-ebpf-with-go)
- [Embracing the Hybrid Cloud: Unlocking Success with Ansible](https://www.wearedevelopers.com/videos/932-embracing-the-hybrid-cloud-unlocking-success-with-ansible)
- [Turning Container security up to 11 with Capabilities](https://www.wearedevelopers.com/videos/718-turning-container-security-up-to-11-with-capabilities)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Stephan Gillich - Bringing AI Everywhere](https://www.wearedevelopers.com/magazine/489-stephan-gillich-bringing-ai-everywhere)
- [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)