> Markdown version of [/jobs/ext/4606045-principal-software-engineer-globalprotect](https://www.wearedevelopers.com/jobs/ext/4606045-principal-software-engineer-globalprotect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Principal Software Engineer - GlobalProtect - **Company:** Palo Alto Networks - **Location:** United States - **Experience:** Expert - **Salary:** $183,600.0 - $297,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Systems Engineering, C++ (Programming Language), Protocol Stack, Computer Networks, Computer Engineering, Software Debugging, Device Drivers, Domain Name System (DNS), Datagram Transport Layer Security, Internet Protocol Security (IP SEC), IPv4, IPv6, Interoperability, Virtual Private Networks (VPN), Routing, Network Virtualization, Memory Leaks, WinDBg, Data Logging, Cloud Platform System, Delivery Pipeline, Information Technology, Objective C++, C++14 - **Published:** November 6, 2026 - **Apply:** https://startup.jobs/senior-principal-software-engineer-globalprotect-windows-macos-internals-paloaltonetworks-com-10688785 ## About the Role * Significant hands-on experience in C and modern C++(C++17/20) on Windows and/or macOS, with deep command of OS internals. * Deep expertise in at least one of the following, and solid working knowledge of the other: + Windows: Kernel-mode driver development and debugging (NDIS miniport and filter drivers, KMDF/UMDF, virtual network adapters), plus practical experience with the Windows Filtering Platform (WFP), callout drivers, and routing tables. + macOS: Building and maintaining networking agents with the NetworkExtension and SystemExtensions frameworks, IPC architectures (XPC, Mach messaging), and Apple code-signing and entitlement models. * Practical experience with driver and extension release pipelines: Windows HLK testing, WHQL/attestation signing (EV certificates, Partner Center), and Apple Developer ID notarization. * Hands-on experience with system debuggers (WinDbg, LLDB) and performance tooling (Windows Performance Analyzer/ETW, Instruments), including triage of kernel crash dumps. * Experience reading and writing Objective-C/Objective-C++ in a production codebase is expected. Swift is a plus. * Demonstrated technical leadership: owning a cross-component architecture or a major migration, and mentoring other engineers., * VPN and networking mechanics: Secure tunneling and packet framing (IPsec/IKEv2, SSL/TLS, DTLS, WireGuard), Path MTU Discovery, IPv4/IPv6 dual-stack routing, DNS behavior in split-tunnel configurations, and captive portal handling. * Power and lifecycle behavior: Experience with sleep/wake, Modern Standby (Windows), and power-state handling in network stacks and system extensions. * Security integrations: TPM and Secure Enclave posture checks, Windows Protected Process Light (PPL), and Apple's Endpoint Security framework. * Interoperability: Experience debugging interactions with third-party endpoint security, EDR, and firewall products that also hook into the network stack. * Modern systems languages: Exposure to or interest in evaluating memory-safe languages such as Rust for low-level platform networking components. * Bachelor's or Master's degree in Computer Science, Computer Engineering, or a related technical field. ## Description As a Senior Principal Software Engineer for GlobalProtect, you will be the hands-on technical authority for our endpoint networking stack across the Windows driver and macOS NetworkExtension ecosystems. You will lead the design, reliability, and security of the deepest layers of the client: NDIS virtual adapters and filter drivers, Windows Filtering Platform (WFP) enforcement, macOS System Extensions and NetworkExtension providers, packet processing, routing, DNS handling, and the OS integration points that sit beneath them. This software runs on millions of enterprise devices worldwide., * Datapath architecture and development. Design and implement low-level components for GlobalProtect's virtual network adapters, packet interception, routing, split-tunneling, and DNS handling on Windows and macOS. * Platform modernization. Align the client with evolving OS models by moving our Windows NDIS and WFP-based components toward KMDF, WFP, and user-mode patterns where appropriate, and by evolving our macOS System Extension and NetworkExtension providers (NEFilterDataProvider, NEAppProxyProvider, NEDNSProxyProvider, and, where appropriate, NEPacketTunnelProvider). * Driver qualification and signing. Own Windows Hardware Lab Kit (HLK) test passes, WHQL/attestation signing through the Microsoft Partner Center, and Apple Developer ID signing, notarization, and system extension provisioning. Improve the automation and reliability of these pipelines. * Critical failure triage. Serve as the escalation engineer for BSODs, kernel panics, deadlocks, pool corruption, memory leaks, and hard-to-reproduce hangs. You will use WinDbg, LLDB, crash dump analysis, ETW, and unified logging. * Power-state and network-transition robustness. Drive fixes and design improvements for sleep/wake, Modern Standby, network change, and interface transition behavior, which are a recurring source of field issues. * Secure by design. Implement secure IPC between drivers, system services, extensions, and user-session processes (including XPC and Mach messaging on macOS). Enforce least-privilege separation and deliver memory-safe practices in C and modern C++. * Technical leadership and mentorship. Partner with engineering, QA, and security teams across the product lifecycle. Mentor systems engineers, review designs, and set the bar for OS-level development and testing.