Principal Engineer - Network, Cloud and Identity

Carmax

Hybrid Actively hiring
Plano, TX · Richmond, USA Posted 25 days ago
View original post Log in to save

At a glance

AI generated

TL;DR

As a Principal Engineer within CarMax’s Solutions Delivery and Engineering organization, you will lead technical initiatives in enterprise networking, cloud networking, and automation, with a focus on Identity Services Engine (ISE) and Network Access Control (NAC). Your responsibilities include providing architectural guidance, collaborating with engineering teams to design secure network solutions, and mentoring engineers. You will work with HPE Aruba and Fortinet for network infrastructure, Azure for cloud platforms, and Cisco ISE for identity-based security, ensuring high availability and resilience in hybrid environments. This role demands expertise in Python, Ansible, or PowerShell for automation, as well as experience with TACACS+ for device administration. You must possess strong analytical skills, clear communication abilities, and a commitment to operational stability and continuous improvement through automation.

Skills

Cisco ISE Network Access Control (NAC) TACACS+ Python Ansible PowerShell Azure HPE Aruba Fortinet Hybrid Networking Network Automation CI/CD

What you'll do

  • Provide senior technical leadership for enterprise network and cloud networking platforms.
  • Design and deliver identity-based network security solutions aligned with business needs.
  • Influence technical standards and best practices across teams, focusing on security.
  • Lead implementation efforts for NAC and identity-based network security solutions.
  • Mentor engineers through technical reviews and problem resolution sessions.
  • Stay current with industry trends in networking, cloud connectivity, and automation.

What we're looking for

  • 7+ years of experience with enterprise routing, switching, firewalls, and wireless networks.
  • Hands-on experience designing, implementing, and supporting Cisco Identity Services Engine (ISE).
  • Strong knowledge of Network Access Control (NAC) concepts for wired, wireless, and device administration.
  • Experience configuring authentication and authorization policies within Cisco ISE.
  • Proven ability to design and support highly available and resilient network architectures in cloud platforms.
  • Demonstrated experience working in large, complex enterprise environments.
  • Ability to drive technical improvements or standards across multiple teams.

Market check

Salary context

This listing doesn't show a salary. Similar roles on FindRole typically pay $125,530–$216,750.

Peer median band

$125,530–$216,750

Median floor and ceiling across peers.

Typical midpoint (25–75%)

$142,400–$212,343

Middle half of comparable postings.

Based on 240 comparable postings.

* 240 is the maximum number of comparable postings sampled.

Employer

About Carmax

CarMax is the largest used car retailer in the United States, offering a customer-friendly, no-haggle buying experience with a broad selection of quality used vehicles, financing, and vehicle protection plans. Industry: Automotive Retail

Carmax currently has 37 open roles on FindRole.

Most-posted roles

View all roles at Carmax

More like this

Similar roles

Principal of Cloud Infrastructure & Engineering

T. Rowe Price

Owings Mills, Md - Building 3, US 35 days ago $159,000–$272,000
AWS Azure GCP Terraform CloudFormation Ansible Python Java Groovy CI/CD Infrastructure as Code High Availability Resilience Monitoring Alerting SaaS Integration IAM Security Systems DevOps Mentorship

Principal Engineer – Scale Out Networking & Systems Architecture

Qualcomm

San Diego, Ca,Us, US 44 days ago $192,600–$289,000
Linux RoCE RDMA NICs Firmware Linux_kernel_drivers User_space_libraries PCIe DMA C C++ X86 ARM64 UAL ESUN Debugging Cross_org_collaboration System_architecture Scale_out_systems Multi_server_inference Disaggregated_serving

Cloud Engineer

Booz Allen Hamilton

Locations Arlington, Virginia, US 63 days ago $69,400–$158,000
AWS Splunk ACAS Trellix F5 Infrastructure as Code (IaC) Configuration as Code (CaC) Agile methodologies DevSecOps CI/CD Linux Windows Networking Security groups Policy management Monitoring Maintenance Security

Cloud Engineer

Booz Allen Hamilton

Locations Arlington, Virginia, US 30 days ago $69,400–$158,000
AWS Kubernetes Docker Helm CI/CD DevSecOps Prometheus Grafana Python Terraform PostgreSQL GitLab GitHub Linux+ AWS_Solutions_Architect_Certification

Cloud Engineer

Booz Allen Hamilton

Locations Mclean, Virginia, US 63 days ago $62,000–$141,000
Python Terraform CloudFormation CDK Ansible PowerShell CI/CD AWS Azure Google Cloud Platform Kubernetes Docker PostgreSQL MongoDB

Cloud Engineer

Booz Allen Hamilton

Locations Arlington, Virginia, US 32 days ago $86,800–$198,000
AWS Terraform Jenkins GitLab GitHub Python Bash NVIDIA_Omniverse CI/CD CloudFormation