Principal Enterprise Network Security Architect

Palo Alto Networks

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
Santa Clara, CA
Salary
$154,000–$249,500 / yr
Posted
37 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $186k
This role $202k
$126k most similar roles pay here $263k

This role pays more than 58% of similar roles. Most pay $155,900–$216,300 — the shaded band above. At the midpoint, this role pays about $202k versus about $186k for comparable roles.

Based on 240 similar postings.

Employer

About Palo Alto Networks

Palo Alto Networks is a global cybersecurity company offering network security, cloud security, and endpoint protection solutions.

Palo Alto Networks currently has 34 open roles on FindRole.

Listed pay typically runs $159,000–$257,750 across 32 roles with salary data.

Most-posted roles

View all roles at Palo Alto Networks

At a glance

TL;DR · Principal Enterprise Network Security Architect

As a Principal Enterprise Network Security Architect within the Information Technology team, you will own the architectural blueprint and governance for a global network security footprint across hybrid environments. You will define enterprise-wide policies for segmentation, access control, and traffic inspection while integrating security into all layers of network design. The role involves identifying vulnerabilities, leading remediation efforts in on-prem and cloud environments, and serving as the ultimate escalation authority during critical events. You will build automation using scripting, CI/CD pipelines, and infrastructure-as-code tools like Terraform and Ansible. Key technical requirements include expertise in Zero Trust architecture, firewall technologies, VPN, IDS/IPS, NAC, and micro-segmentation. You must also possess deep knowledge of routing, switching, TCP/IP protocols, and securing AI-enabled solutions involving LLM architectures, data flows, and API protection across AWS, Azure, or GCP platforms.

What you'll do

  • Own the architectural blueprint and governance for the global network security footprint across hybrid environments.
  • Define and enforce enterprise-wide security policies including segmentation, access control, and traffic inspection.
  • Integrate security into all layers of network design in collaboration with infrastructure and IT teams.
  • Identify vulnerabilities and lead complex remediation efforts across on-premise and cloud environments.
  • Implement advanced network security automation using scripting, CI/CD pipelines, and infrastructure-as-code.
  • Serve as the ultimate escalation authority during critical security events to design long-term architectural remediations.
  • Provide technical mentorship to senior engineers and contribute to corporate architectural standards.

What we're looking for

  • Bachelor's degree required.
  • 12+ years of progressive experience in large enterprise networking and network security engineering.
  • Expertise in Zero Trust architecture, advanced network segmentation, and securing global hybrid-cloud infrastructures (AWS, Azure, or GCP).
  • Experience architecting and implementing security automation and infrastructure-as-code frameworks using Terraform and Ansible.
  • Ability to build CI/CD pipelines and leverage AI/ML tools for operational tasks and auto-healing capabilities.
  • Knowledge of AI and LLM architectures including data flows, APIs, and securing AI-enabled solutions against risks like prompt injection.
  • Expertise in firewall technologies, VPN, IDS/IPS, NAC, and advanced micro segmentation strategies.
  • Mastery of routing, switching, and TCP/IP protocols with experience in Arista or Juniper hardware.

More like this

Similar roles

Lead Enterprise Security Architect

Booz Allen Hamilton

McLean, VA 59 days ago $86,800$198,000
Zero Trust NIST SP 800‑53 SASE DLP Encryption Tokenization F5 Palo Alto AWS Azure SIEM SOAR Kubernetes DevSecOps Agile RMF FedRAMP ISO 27001 COBIT
7+ yrs exp

Lead Network Engineer

Take-Two Interactive

Austin, TX 50 days ago
Zero Trust Architecture SASE Palo Alto Networks Panorama Python Ansible Terraform CI/CD AWS GCP Arista Meraki F5 BIG-IP Checkmk BGP SD-WAN Netbox Nautobot Infrastructure as Code Microsegmentation
8+ yrs exp

Lead Application Security Engineer

Booz Allen Hamilton

Colorado Springs, CO 44 days ago $99,000$225,000
Zero Trust Palo Alto Fortinet Cisco Juniper F5 Nginx A10 NetScaler ColorTokens Illumio Terraform VS Code AWS Azure OWASP Top 10 CVSS CWE WASC SANS-25 Infrastructure-as-Code Routing Switching

Cybersecurity Architect

Fiserv

Berkeley Heights, NJ +5 13 days ago $168,500$271,200
Zero Trust AWS Azure GCP Kubernetes Terraform CI/CD Python Bash Identity and Access Management Network Security Encryption Firewalls VMware Cisco F5 PCI DSS NIST ISO 27001 HIPAA SOX GDPR CCPA
10+ yrs exp

Senior Network Security Architect

Nvidia

Santa Clara, CA 2 days ago $196,000$310,500
Network Security Zero Trust Python Go Ruby AWS Azure Cloud Platform Firewalls NAC 802.1X Micro-segmentation NIST CSF CIS Controls MITRE ATT&CK
10+ yrs exp