Principal Engineer Software (Network Securitiy/SASE) - NetSec

Our Mission At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place.

**Who We Are** In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us!

We believe collaboration thrives in person. That’s why most of our teams work from the office full time, with flexibility when it’s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes.

**Job Summary** The Team Engineering - Our Engineering team is at the core of our products and solutions, building the next-generation technologies that protect our digital way of life. We thrive on innovation and complex problem-solving, collaborating across teams to deliver highly scalable, secure, and performant systems.

**Job Summary** As a Principal Engineer in our SASE group, you will be a key leader in designing, developing, and delivering next-generation technologies for our SD-WAN team. You will be part of a world-class engineering team working on groundbreaking technologies and solving complex problems. We are seeking a passionate leader who takes ownership, brings new ideas to software development, and thrives in a collaborative, fast-paced environment.

**Key Responsibilities**

• Implement URL filtering, anti-malware, SSL/TLS decryption, and Cloud Access Security Brokers for secure Direct Internet Access.
• Work with 802.1X, RADIUS/TACACS+, and Identity Providers (IdPs) for authentication.
• Manage IPsec tunnels and public key infrastructure (PKI).
• Wrap and parse packets for VXLAN, GENEVE, GRE, and IPsec.
• Perform Deep Packet Inspection (DPI) including stream reassembly and Layer 7 Application Identification (AppID).
• Design, develop, and implement highly scalable software features for our SD-WAN solution.
• Architect and implement large-scale distributed systems, ensuring high availability and performance.
• Lead database design and implementation for custom use cases, including graph, time-series, and in-memory databases.
• Proactively collaborate with development and quality assurance teams to achieve the best product quality.
• Work closely with DevOps and Technical Support teams to troubleshoot and resolve complex customer issues.
• Suggest and implement improvements to the software development lifecycle and team processes.
• Mentor and coach junior team members, fostering a culture of technical excellence and applied learning.

**Qualifications** Required Qualifications

• M.E./B.E. degree in Computer Science/Engineering or equivalent experience.
• 9+ years of professional software development experience.
• Experience implementing URL filtering, anti-malware, SSL/TLS decryption, and Cloud Access Security Brokers.
• Experience working with 802.1X, RADIUS/TACACS+, and Identity Providers (IdPs) for authentication.
• Experience managing IPsec tunnels and public key infrastructure (PKI).
• Proficiency in packet wrapping and parsing for VXLAN, GENEVE, GRE, and IPsec.
• Experience with Deep Packet Inspection (DPI), stream reassembly, and Layer 7 Application Identification.
• Extensive hands-on programming skills in C/C++, Python, and Go.
• Expertise in control plane, data plane, and security features of SD-WAN platforms, including multi-core/multi-process programming.
• Deep knowledge of Layer 2/3 networking and routing protocols such as BGP, OSPF, IPSec, QoS, and NAT.

**Preferred Qualifications**

• Experience with DPDK for high-performance network packet processing.
• Familiarity with machine learning concepts and their application.
• Experience with cloud platforms (AWS, Azure, GCE, Kubernetes) and virtualization technologies (ESXi, KVM, Hype…