Principal Security Engineer (Palo Alto Strata Cloud)

At Navy Federal Credit Union, safeguarding member data spans on-prem, cloud, and hybrid networks. The Principal Security Engineer will own the Palo Alto Strata Cloud Manager and Prisma Access program, guiding architecture, deployment, and cross-team collaboration from an onsite base in Winchester, VA.

Responsibilities

• Provide on-call support for significant outages affecting the Palo Alto Strata Cloud Manager.
• Demonstrate deep expertise in the architecture, design, and deployment of the Palo Alto Strata Cloud Manager platform.
• Maintain the Prisma Access environment through Strata Cloud Manager.
• Develop integrations between Prisma Access and other cybersecurity solutions.
• Serve as liaison between Navy Federal and Palo Alto Support.
• Contribute to the technical design of solutions driven by use cases and business requirements.
• Participate in proofs of concept and other evaluations of technologies, designs and solutions, and offer recommendations.
• Stay current with emerging technologies and threat landscapes, proactively evaluating their potential adoption.
• Support the development of cybersecurity requirements, design and architecture artifacts, plans and policies.
• Support the definition of security development and testing efforts.
• Implement security controls across networking devices, databases, operating systems and hardware and software components.
• Understand and integrate cybersecurity development activities into program delivery.
• Analyze cybersecurity data and test results to inform decisions.
• Be part of a team that designs, protects and manages security services for the organization’s global security infrastructure.
• Demonstrate strong written, verbal, and presentation skills to convey complex technical concepts to audiences from non-technical staff to executive decision-makers.
• Collaborate with IT administrators and executive stakeholders to understand requirements and align tooling to meet them.
• Confidently lead discussions on engineering solutions and provide clear, strategic recommendations.
• Be self-motivated and self-educating, yet able to work collaboratively.

Requirements

• Bachelor's Degree in Computer Science, Information Technology or the equivalent combination of training, education, and experience.
• Ten or more years of experience in cybersecurity engineering, including on-premises and cloud architectures, proxy management, cloud governance and security controls.
• Five or more years of hands-on experience with Palo Alto Strata Cloud Manager or Panorama and related leading technologies.
• Three or more years of hands-on experience tuning network sensors such as IDS/IPS, DDoS protections, and cloud security services.
• Domain expertise in network security sensors including IDS, CASB, virtual network security, DDoS protections and DNS.
• Detailed understanding of virtual network technologies, including routers, switches, load balancers, firewalls and proxies.

Technologies

• Palo Alto Strata Cloud Manager
• Palo Alto Prisma Access
• Palo Alto Panorama
• Splunk
• Linux
• PowerShell
• Python
• Azure Cloud
• Cloud Proxy
• SASE
• SD-WAN
• Web Isolation
• Zero Trust Network Access
• PKI
• SSL
• SSH
• HTTPS
• IDS/IPS
• CASB
• DNS

Additional Information

• Hours: Monday - Friday, 8:00 AM - 4:30 PM
• Locations: 820 Follin Lane, Vienna, VA 22180; 5510 Heritage Oaks Drive, Pensacola, FL 32526; 141 Security Drive, Winchester, VA 22602