Network Security Architect

Palo Alto Networks

Confirmed live today High trust
Hybrid

Quick summary

Work type
Hybrid
Location
Santa Clara, CA
Salary
$159,100–$257,400 / yr
Posted
84 days ago
Freshness
Confirmed live today

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $178k
This role $208k
$115k $273k
below market most similar roles pay here above market

This role pays more than 72% of similar roles. Most pay $142,437–$213,046 — the blue band above. At the midpoint, this role pays about $208k versus about $178k for comparable roles.

Based on 240 similar postings.

Employer

About Palo Alto Networks

Palo Alto Networks is a global cybersecurity company offering network security, cloud security, and endpoint protection solutions.

Palo Alto Networks currently has 51 open roles on FindRole.

Listed pay typically runs $159,100–$257,400 across 47 roles with salary data.

Most-posted roles

View all roles at Palo Alto Networks

At a glance

TL;DR · Network Security Architect

The Network Security Architect joins the Information Technology team to own the architectural blueprint and governance for the global network security footprint. This role involves defining enterprise-wide security policies for segmentation, access control, and traffic inspection across hybrid environments. The architect will drive security integration into all network layers, identify vulnerabilities, and lead complex remediation efforts. Key responsibilities include implementing security automation using scripting, CI/CD pipelines, and infrastructure-as-code best practices. Required technical skills include expertise in Zero Trust architecture, Terraform, Ansible, and cloud platforms like AWS, Azure, or GCP. The role also requires deep knowledge of AI/ML architectures, LLM data flows, and firewall technologies. The position solves the technical challenge of securing massive, global hybrid-cloud infrastructures while ensuring scalability and proactive threat protection.

What you'll do

  • Own the architectural blueprint and governance for the global network security footprint across hybrid environments.
  • Define and enforce enterprise-wide security policies including segmentation, access control, and traffic inspection.
  • Lead complex remediation efforts to identify and fix vulnerabilities across on-prem and cloud environments.
  • Implement network security automation using scripting, CI/CD pipelines, and infrastructure-as-code best practices.
  • Serve as the ultimate escalation authority during critical security events and design long-term architectural remediations.
  • Provide technical mentorship to senior engineers and contribute to global architectural standards.
  • Secure AI-enabled solutions by addressing identity management, data privacy, and model security.

What we're looking for

  • Bachelor's degree with 12+ years of progressive experience in large enterprise networking and network security engineering.
  • Deep expertise in Zero Trust architecture, advanced network segmentation, and designing global hybrid-cloud infrastructures (AWS, Azure, or GCP).
  • Extensive hands-on experience architecting security automation and infrastructure-as-code frameworks using Terraform and Ansible.
  • Experience leveraging AI/ML tools to simplify operational tasks and build auto-healing capabilities.
  • Strong understanding of AI and LLM architectures, including data flows, APIs, model security, and regulatory compliance.
  • Exceptional expertise in firewall technologies, VPN, IDS/IPS, NAC, and advanced micro-segmentation strategies.
  • Mastery of routing, switching, and TCP/IP protocols with experience in Arista, Juniper, or equivalent enterprise-grade hardware.
  • Must be local to the SF Bay Area or willing to relocate on their own.
  • Proven background with Palo Alto Networks products and platforms (preferred).
  • Superior troubleshooting, analytical, and technical leadership skills (preferred).

More like this

Similar roles

Network Security Architect

Palo Alto Networks

Santa Clara, CA 84 days ago $159,100–$257,400
Zero Trust Terraform Ansible CI/CD infrastructure-as-code AWS Azure GCP Palo Alto Networks NGFW Panorama Prisma Access AI LLM TCP/IP VPN IDS/IPS NAC Arista Juniper
10+ yrs exp Hybrid

Lead Platform Security Architect, Network Security

Blue Cross Blue Shield Association (BCBSA)

Chicago +1 46 days ago $173,400–$251,400
AWS Palo Alto Zero Trust Cloud Security Network Security Micro-segmentation Threat Modeling Identity-based Security Security Monitoring Hybrid-Cloud Agile Firewall Policy Governance Cybersecurity Frameworks Generative AI VDI MS Office
10+ yrs exp Hybrid

Network Architect

Leidos

Bedford, MA 18 days ago $131,300–$237,350
AWS Microsoft Azure Google Cloud Platform Oracle Cloud Infrastructure Terraform Ansible GitLab CI/CD BGP TCP/IP SD-WAN SASE Zero Trust IPAM DNS Kubernetes Firewalls Network Security Infrastructure as Code RMF STIGs NIST
10+ yrs exp

Security Architect

Leidos

Bedford, MA 11 days ago $131,300–$237,350
AWS Azure GCP OCI Kubernetes Terraform Ansible CI/CD DevSecOps Zero Trust IAM CNAPP SIEM SOAR Policy as Code Infrastructure as Code Secrets Management Vulnerability Management NIST SP 800-53 RMF DISA STIGs MITRE ATT&CK
10+ yrs exp

Network Security Automation Engineer

Fiserv

Berkeley Heights, NJ +5 23 days ago $127,500–$204,000
Network Security Architecture Zero Trust Policy-as-Code AWS Azure GCP Kubernetes Software-Defined Networking Palo Alto Check Point Fortinet Cisco IDS/IPS Snort Suricata TCP/IP DNS BGP Wireshark tcpdump IPSec SSL VPN micro segmentation AI-driven Automation
8+ yrs exp

Network Security Automation Engineer

Fiserv

Berkeley Heights, NJ +5 23 days ago $127,500–$204,000
Network Security Architecture Zero Trust Policy-as-Code AWS Azure GCP Kubernetes Software-Defined Networking Palo Alto Check Point Fortinet Cisco IDS/IPS Snort Suricata TCP/IP DNS BGP Wireshark tcpdump IPSec SSL VPN micro segmentation AI-driven Automation
8+ yrs exp