Principal Security Engineer (Palo Alto Strata Cloud)
Job Description
At Navy Federal Credit Union, safeguarding member data spans on-prem, cloud, and hybrid networks. The Principal Security Engineer will own the Palo Alto Strata Cloud Manager and Prisma Access program, guiding architecture, deployment, and cross-team collaboration from an onsite base in Winchester, VA.
Responsibilities
- Provide on-call support for significant outages affecting the Palo Alto Strata Cloud Manager.
- Demonstrate deep expertise in the architecture, design, and deployment of the Palo Alto Strata Cloud Manager platform.
- Maintain the Prisma Access environment through Strata Cloud Manager.
- Develop integrations between Prisma Access and other cybersecurity solutions.
- Serve as liaison between Navy Federal and Palo Alto Support.
- Contribute to the technical design of solutions driven by use cases and business requirements.
- Participate in proofs of concept and other evaluations of technologies, designs and solutions, and offer recommendations.
- Stay current with emerging technologies and threat landscapes, proactively evaluating their potential adoption.
- Support the development of cybersecurity requirements, design and architecture artifacts, plans and policies.
- Support the definition of security development and testing efforts.
- Implement security controls across networking devices, databases, operating systems and hardware and software components.
- Understand and integrate cybersecurity development activities into program delivery.
- Analyze cybersecurity data and test results to inform decisions.
- Be part of a team that designs, protects and manages security services for the organization’s global security infrastructure.
- Demonstrate strong written, verbal, and presentation skills to convey complex technical concepts to audiences from non-technical staff to executive decision-makers.
- Collaborate with IT administrators and executive stakeholders to understand requirements and align tooling to meet them.
- Confidently lead discussions on engineering solutions and provide clear, strategic recommendations.
- Be self-motivated and self-educating, yet able to work collaboratively.
Requirements
- Bachelor's Degree in Computer Science, Information Technology or the equivalent combination of training, education, and experience.
- Ten or more years of experience in cybersecurity engineering, including on-premises and cloud architectures, proxy management, cloud governance and security controls.
- Five or more years of hands-on experience with Palo Alto Strata Cloud Manager or Panorama and related leading technologies.
- Three or more years of hands-on experience tuning network sensors such as IDS/IPS, DDoS protections, and cloud security services.
- Domain expertise in network security sensors including IDS, CASB, virtual network security, DDoS protections and DNS.
- Detailed understanding of virtual network technologies, including routers, switches, load balancers, firewalls and proxies.
Technologies
- Palo Alto Strata Cloud Manager
- Palo Alto Prisma Access
- Palo Alto Panorama
- Splunk
- Linux
- PowerShell
- Python
- Azure Cloud
- Cloud Proxy
- SASE
- SD-WAN
- Web Isolation
- Zero Trust Network Access
- PKI
- SSL
- SSH
- HTTPS
- IDS/IPS
- CASB
- DNS
Additional Information
- Hours: Monday - Friday, 8:00 AM - 4:30 PM
- Locations: 820 Follin Lane, Vienna, VA 22180; 5510 Heritage Oaks Drive, Pensacola, FL 32526; 141 Security Drive, Winchester, VA 22602