Network Security Architect

Palo Alto Networks

Confirmed live today High trust
Hybrid

Quick summary

Work type
Hybrid
Location
Santa Clara, CA
Salary
$159,100–$257,400 / yr
Posted
84 days ago
Freshness
Confirmed live today

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $178k
This role $208k
$115k $273k
below market most similar roles pay here above market

This role pays more than 72% of similar roles. Most pay $142,437–$213,046 — the blue band above. At the midpoint, this role pays about $208k versus about $178k for comparable roles.

Based on 240 similar postings.

Employer

About Palo Alto Networks

Palo Alto Networks is a global cybersecurity company offering network security, cloud security, and endpoint protection solutions.

Palo Alto Networks currently has 51 open roles on FindRole.

Listed pay typically runs $159,100–$257,400 across 47 roles with salary data.

Most-posted roles

View all roles at Palo Alto Networks

At a glance

TL;DR · Network Security Architect

The Network Security Architect joins the Information Technology team to own the architectural blueprint and governance for the global network security footprint. This role involves defining enterprise-wide security policies for segmentation, access control, and traffic inspection across hybrid environments. You will drive security integration into network designs, identify vulnerabilities, and lead remediation efforts for on-prem and cloud infrastructures. Key responsibilities include implementing security automation using scripting, CI/CD pipelines, and infrastructure-as-code best practices. Required technical skills include expertise in Zero Trust architecture, Terraform, Ansible, and firewall technologies like VPN, IDS/IPS, and NAC. You must master routing, switching, and TCP/IP protocols using Arista or Juniper hardware. Additionally, you will secure AI-enabled solutions by addressing data privacy, prompt injection, and model security.

What you'll do

  • Own the architectural blueprint and governance for the global network security footprint across hybrid environments.
  • Define and enforce enterprise-wide security policies including segmentation, access control, and traffic inspection.
  • Integrate security into all layers of network design by collaborating with infrastructure and IT teams.
  • Identify vulnerabilities and lead complex remediation efforts across on-prem and cloud environments.
  • Implement network security automation using scripting, CI/CD pipelines, and infrastructure-as-code.
  • Serve as the ultimate escalation authority during critical security events and design long-term architectural remediations.
  • Provide technical mentorship to senior engineers and contribute to global architectural standards.

What we're looking for

  • Bachelor's degree with 12+ years of progressive experience in large enterprise networking and network security engineering.
  • Deep expertise in Zero Trust architecture, advanced network segmentation, and securing global hybrid-cloud infrastructures (AWS, Azure, or GCP).
  • Extensive experience architecting and implementing security automation and infrastructure-as-code frameworks using Terraform and Ansible.
  • Experience leveraging AI/ML tools to simplify operational tasks and build auto-healing capabilities.
  • Strong understanding of AI and LLM architectures, including data flows, APIs, and securing AI-enabled solutions against threats like prompt injection.
  • Exceptional expertise in firewall technologies, VPN, IDS/IPS, NAC, and advanced micro-segmentation strategies.
  • Mastery of routing, switching, and TCP/IP protocols with experience in Arista, Juniper, or equivalent enterprise-grade hardware.
  • Must be local to the SF Bay Area or willing to relocate on their own.
  • Proven background with Palo Alto Networks products and platforms (preferred).
  • Superior troubleshooting, analytical, and technical leadership skills (preferred).

More like this

Similar roles

Network Security Architect

Palo Alto Networks

Santa Clara, CA 84 days ago $159,100–$257,400
Zero Trust Terraform Ansible CI/CD infrastructure-as-code AWS Azure GCP Palo Alto Networks NGFW Panorama Prisma Access AI LLM TCP/IP IDS/IPS VPN NAC Arista Juniper
10+ yrs exp Hybrid

Lead Platform Security Architect, Network Security

Blue Cross Blue Shield Association (BCBSA)

Chicago +1 46 days ago $173,400–$251,400
AWS Palo Alto Zero Trust Cloud Security Network Security Micro-segmentation Threat Modeling Identity-based Security Security Monitoring Hybrid-Cloud Agile Firewall Policy Governance Cybersecurity Frameworks Generative AI VDI MS Office
10+ yrs exp Hybrid

Network Architect

Leidos

Bedford, MA 18 days ago $131,300–$237,350
AWS Microsoft Azure Google Cloud Platform Oracle Cloud Infrastructure Terraform Ansible GitLab CI/CD BGP TCP/IP SD-WAN SASE Zero Trust IPAM DNS Kubernetes Firewalls Network Security Infrastructure as Code RMF STIGs NIST
10+ yrs exp

Security Architect

Leidos

Bedford, MA 11 days ago $131,300–$237,350
AWS Azure GCP OCI Kubernetes Terraform Ansible CI/CD DevSecOps Zero Trust IAM CNAPP SIEM SOAR Policy as Code Infrastructure as Code Secrets Management Vulnerability Management NIST SP 800-53 RMF DISA STIGs MITRE ATT&CK
10+ yrs exp

Network Security Automation Engineer

Fiserv

Berkeley Heights, NJ +5 23 days ago $127,500–$204,000
Network Security Architecture Zero Trust Policy-as-Code AWS Azure GCP Kubernetes Software-Defined Networking Palo Alto Check Point Fortinet Cisco IDS/IPS Snort Suricata TCP/IP DNS BGP Wireshark tcpdump IPSec SSL VPN micro segmentation AI-driven Automation
8+ yrs exp

Network Security Automation Engineer

Fiserv

Berkeley Heights, NJ +5 23 days ago $127,500–$204,000
Network Security Architecture Zero Trust Policy-as-Code AWS Azure GCP Kubernetes Software-Defined Networking Palo Alto Check Point Fortinet Cisco IDS/IPS Snort Suricata TCP/IP DNS BGP Wireshark tcpdump IPSec SSL VPN micro segmentation AI-driven Automation
8+ yrs exp