# Staff Network Engineer

**Company:** [Snowflake](https://hotfix.jobs/companies/snowflake)
**Location:** Unspecified
**Role:** Security Engineering
**Salary:** $160k – $210k/yr
**Experience:** 10+ years
**Skills:** Zscaler, Zia, Zpa, Zdx, Zcc, Zero Trust, Sase, Palo Alto Pan-Os, Globalprotect, Panorama, Aruba Wireless, Cisco Catalyst, AWS, Azure, GCP
**Posted:** 2026-08-18

> Leads enterprise Zero Trust and secure-access networking, owning Zscaler architecture and operations while supporting Palo Alto, wireless, LAN/WAN, and multi-cloud infrastructure. The role requires 10+ years of network experience, deep ZIA/ZPA expertise, automation skills, and major-incident leadership.

## Job Description

## Responsibilities
- Own and operate the Zscaler platform, including ZIA, ZPA, ZDX, and ZCC.
- Design policy frameworks, application segmentation, PAC and traffic-forwarding standards, App Connector topology, and NSS/log-streaming architecture.
- Troubleshoot secure-access incidents involving tunnel flapping, broker and connector health, SSL inspection, DNS/DTLS failures, and systemic connectivity issues.
- Manage Palo Alto firewalls, Panorama, and GlobalProtect VPN while planning migration toward Zscaler solutions.
- Support Aruba Central wireless, Ekahau, and Cisco Catalyst switches globally.
- Design, install, and configure network devices and ISP circuits for new offices.
- Build automation, dashboards, alerting, and proactive network monitoring using log analytics and Snowflake telemetry.
- Troubleshoot secure networking constructs across AWS, Azure, and Google Cloud, including NVAs, NSGs, VPCs, UDRs, Direct Connect, and ExpressRoute.
- Author technical runbooks, escalation procedures, and knowledge-base content.
- Participate in on-call rotations, implement changes, and lead responses to major network incidents.
- Travel internationally for short periods for site builds.

## Requirements
- 10+ years of enterprise network infrastructure experience.
- 3+ years of hands-on Zscaler ZIA/ZPA design and deployment at scale.
- Expertise in Zero Trust and SASE architecture, including ZTNA, proxy/SWG, SSL inspection, and cloud security.
- Hands-on experience with Palo Alto PAN-OS, GlobalProtect, Panorama, and enterprise VPNs.
- Aruba wireless and Cisco LAN/WAN routing, switching, and 802.1X fundamentals.
- Strong troubleshooting skills across TCP/IP, DNS, DHCP, TLS/DTLS, BGP, and QoS.
- Multi-cloud networking and site-to-cloud connectivity experience across AWS, Azure, and Google Cloud.
- Python scripting, API configuration, and log observability experience.
- Strong ITSM, documentation, and communication skills.

## Nice to Have
- Zscaler ZCCA-IA/PA or ZDTA certification.
- Palo Alto PCNSE certification.
- Aruba ACMA/ACMP certification.
- Cisco CCNA/CCNP certification.
- Experience migrating legacy GlobalProtect VPNs to ZPA.
- Familiarity with SASE, Terraform, and network-as-code/IaC.
- Experience in high-growth SaaS or cloud-native environments.

## Similar jobs

- [Staff Identity Governance and Access Engineer](https://hotfix.jobs/jobs/8fe7fe60-ff7a-48f4-a805-f3f100e1814f) - Okta - Bellevue, WA - $161k – $221k/yr
- [Staff Identity Engineer](https://hotfix.jobs/jobs/9840c62b-d314-4749-aa98-2057f5343be2) - Okta - Bellevue, WA - $161k – $221k/yr
- [Staff Security Engineer](https://hotfix.jobs/jobs/29576103-a601-455c-a963-ce04128098e5) - Twilio - Remote - $156k – $194k/yr
- [Staff Enterprise Security Engineer, AI Security](https://hotfix.jobs/jobs/f0299624-eaec-4b80-89d9-94fde4d866e9) - Twilio - Remote - $156k – $194k/yr
- [Staff Security Researcher](https://hotfix.jobs/jobs/6b308cd8-be33-459a-b904-08e54567ad7b) - GitLab - Remote - $168k – $238k/yr

**Apply:** https://hotfix.jobs/jobs/337c867c-58b5-4092-8449-d25ec15c1fd5
**Canonical:** https://hotfix.jobs/jobs/337c867c-58b5-4092-8449-d25ec15c1fd5